You need additional security and are configuring IP source guard.
Which three statements accurately describe IP source guard? (Choose three.)
A.
The default setting for access ports using IP source guard is untrusted.
B.
IP source guard does not check packets received on a trunk interface.
C.
You can enable IP source guard on interfaces and VLANs.
D.
Packets with an invalid IP address or MAC address are rejected.
E.
IP source guard checks the IP/MAC address of packets received against entries stored in the
DHCP snooping database.
IP Source Guard
The IP Source Guard feature limits the effects of IP address spoofing attacks by
validating the source IP address in packets received on an untrusted access interface
against the DHCP snooping database. When the source IP address and SMAC
address are found to be valid, the packet is accepted. In the case of a mismatch in
either the source IP or SMAC address, the packet is discarded
0
0