IP S
OURCE
G
UARD
C
OMMANDS
4-299
Default Setting
No configured entries
Command Mode
Global Configuration
Command Usage
• Table entries include a MAC address, IP address, lease time, entry type
(Static-IP-SG-Binding, Dynamic-DHCP-Binding,
Static-DHCP-Binding), VLAN identifier, and port identifier.
• All static entries are configured with an infinite lease time, which is
indicated with a value of zero by the
show ip source-guard command
(page -300).
• When source guard is enabled, traffic is filtered based upon dynamic
entries learned via DHCP snooping, static entries configured in the
DHCP snooping table, or static addresses configured in the source
guard binding table with this command.
• Static bindings are processed as follows:
• If there is no entry with same VLAN ID and MAC address, a new
entry is added to binding table using the type of static IP source guard
binding.
• If there is an entry with same VLAN ID and MAC address, and the
type of entry is static IP source guard binding, then the new entry will
replace the old one.
• If there is an entry with same VLAN ID and MAC address, and the
type of the entry is dynamic DHCP snooping binding, then the new entry
will replace the old one and the entry type will be changed to static IP
source guard binding.
Example
This example configures a static source-guard binding on port 5.
Related Commands
ip source-guard (4-296)
Console(config)#ip source-guard binding 11-22-33-44-55-66 vlan 1
192.168.0.99 interface ethernet 1/5
Console(config-if)#
To Next Page
Loading...
