Configuring Security
IP Source Guard
Cisco 500 Series Stackable Managed Switch Administration Guide
341
18
To view the DHCP Snooping Binding database, see TCAM usage and set inactive
entry activation:
STEP 1
Click
Security
>
IP Source Guard
>
Binding Database.
The
Binding Database
page is displayed.
STEP 2
The DHCP Snooping Binding database uses TCAM resources for managing the
database. Complete the
Insert Inactive
field to select how frequently the switch
should attempt to activate inactive entries. It has the following options:
•
Retry Frequency
—The frequency with which the TCAM Resources are
checked.
•
Never
-Never try to reactivate inactive addresses.
The entries in the Binding database are displayed:
•
VLAN ID
—VLAN on which packet is expected.
•
MAC Address—MAC address to be matched.
•
IP Address—IP address to be matched.
•
Interface
—Interface on which packet is expected.
•
Status
—Displays whether interface is active.
•
Type
—Displays whether entry is dynamic or static.
•
Reason
—If the interface is not active, displays the reason. The following
reasons are possible:
-
No Problem
—Interface is active.
-
No Snoop VLAN
—DHCP Snooping is not enabled on the VLAN.
-
Trusted
Port
—Port has become trusted.
-
Resource
Problem
—TCAM resources are exhausted.
The entries in the Binding database are displayed. To see a subset of them, enter
the relevant search criteria and click
Go
.