This value sets how IP Source Guard validates traffic on a given interface: macBase(1) checks source MAC only, ipBase(2) checks source IP only, or macIpBase(3) checks both together, per the source's IPSourceGuardMode textual convention. A network administrator sets this to control how strictly the switch validates that traffic entering a port matches its known, bound source addresses, defending against spoofing. For example, setting zxr10IPSourceGuardMode to macIpBase(3) on an access port enforces the strictest check, requiring both the source MAC and source IP to match a legitimate binding before traffic is allowed.