Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term IP Source Guard

Training Camp • Cybersecurity Glossary

What is IP Source Guard?

IP Source Guard filters Layer 2 traffic using the DHCP snooping bindings so a host can only use its assigned IP, preventing IP address spoofing.

Glossary > Network Security > IP Source Guard

Understanding IP Source Guard

IP Source Guard is a Layer 2 switch security feature that restricts a port to forwarding only IP traffic whose source address matches an entry in the DHCP snooping binding database or a static binding. By validating source IP, and optionally MAC, against authorized bindings, it prevents hosts from spoofing addresses assigned to other devices. It is commonly deployed alongside DHCP snooping and Dynamic ARP Inspection to harden access-layer switching.

Learn More About IP Source Guard:

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →