8. Set Up IP Source Binding Function.
Switch(config)# ip source binding
[1-12] ip-address [A.B.C.D |
A:B:C:D:E:F:G:H]
Specify the IP/IPv6 address security
binding number.
[A.B.C.D |
A:B:C:D:E:F:G:
H]
Switch(config)# ip source binding
[1-12]
Enable the IP/IPv6 address for the
specified number.
Switch(config)# ip source
Globally enable IP/IPv6 address
security binding.
Switch(config)# no ip source
Globally disable IP/IPv6 address
security binding.
Switch(config)# no ip source
binding [1-12]
Disable the IP/IPv6 address for the
specified number.
Switch(config)# no ip source
binding [1-12] ip-address
Remove the IP/IPv6 address of the
specified number from the IP Source
Binding list.
Switch(config)# show ip source
Show IP/IPv6 Source configuration.
9. Use “Interface” command to configure IP Source Guard for Security.
Switch(config)# interface
[port_list]
Enter several discontinuous port
numbers separated by commas or a
range of ports with a hyphen. For
example:1,3 or 2-4
Switch(config-if-PORT-PORT)#
ip sourceguard [dhcp | fixed-ip]
Specify the authorized access type
for the selected ports.
dhcp: DHCP server assigns IP
address.
fixed IP: Only Static IP (Create
Static IP table first).
unlimited: Non-Limited (Allows both
static IP and DHCP-assigned IP).
This is the default setting.