IP Spoofing Control and IPsource guard

JimboJambo

hi.

I have set up IP spoofing control on my USG flex h which seems to work well but when I try and set up IPSG on my nebula controlled switches I get some switches disconnecting from nebula and clients been blocked even if I don’t have any ports selected.

I’ve added them to the list of allowed clients but it doesn’t seem to fix the issue.

Do I have to set it up in a particular order first? And Is it necessary to have both turned on or is it sufficient just to use the protections on the Zywall?

Thanks

Zyxel_Melen

Hi @JimboJambo

IP Spoofing Control and IP source guard can be enabled at the same time. The issue you encountered should be misconfiguration.

Here are some FAQs for you to reference:

Understanding and Configuring IP Source Guard in Nebula switch — Zyxel Community

What should be noted when setting IP Source Guard - DHCP Snooping trust? — Zyxel Community