Client Security Commands
22-6
22
- If there is an entry with same VLAN ID and MAC address, and the type of
entry is static IP source guard binding, then the new entry will replace the
old one.
- If there is an entry with same VLAN ID and MAC address, and the type of
the entry is dynamic DHCP snooping binding, then the new entry will
replace the old one and the entry type will be changed to static IP source
guard binding.
Example
This example configures a static source-guard binding on port 5.
Related Commands
ip source-guard (22-3)
ip dhcp snooping (22-7)
ip dhcp snooping vlan (22-9)
show ip source-guard
This command shows whether source guard is enabled or disabled on each
interface.
Command Mode
Privileged Exec
Example
show ip source-guard binding
This command shows the source guard binding table.
Command Mode
Privileged Exec
Example
Console(config)#ip source-guard binding 11-22-33-44-55-66 vlan 1
192.168.0.99 interface ethernet 1/5
Console(config-if)#
Console#show ip source-guard
Interface Filter-type
--------- -----------
Eth 1/1 DISABLED
Eth 1/2 DISABLED
Eth 1/3 DISABLED
Eth 1/4 DISABLED
Eth 1/5 SIP
Eth 1/6 DISABLED
.
.
.
Console#show ip source-guard binding
MacAddress IpAddress Lease(sec) Type VLAN Interface
----------------- --------------- ---------- -------------------- ---- ---------
11-22-33-44-55-66 192.168.0.99 0 Static-IP-SG-binding 1 Eth 1/5
Console#
To Next Page
Loading...
Need help?
General