Configuring the Switch
3-96
• SIP – Enables traffic filtering based on IP addresses stored in the binding table.
• SIP-MAC – Enables traffic filtering based on IP addresses and corresponding
MAC addresses stored in the binding table.
Web – Click IP Source Guard, Port Configuration. Set the required filtering type for
each port and click Apply.
Figure 3-51 IP Source Guard Port Configuration
CLI – This example sets IP source guard filter mode on port 5 to check both the
source IP and MAC address for ingress packets against the binding table
.
Static IP Source Guard Binding Configuration
Adds a static addresses to the source-guard binding table. Table entries include a
MAC address, IP address, lease time, entry type (Static, Dynamic), VLAN identifier,
and port identifier. All static entries are configured with an infinite lease time, which
is indicated with a value of zero in the table.
Command Usage
• Static addresses entered in the source guard binding table are automatically
configured with an infinite lease time. Dynamic entries learned via DHCP snooping
Console(config)#interface ethernet 1/5
Console(config-if)#ip source-guard sip 4-111
Console(config-if)#end
Console#show ip source-guard 4-114
Interface Filter-type
--------- -----------
Eth 1/1 DISABLED
Eth 1/2 DISABLED
Eth 1/3 DISABLED
Eth 1/4 DISABLED
Eth 1/5 SIP
Eth 1/6 DISABLED
.
.
.