xStack
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
304
39
IP-MAC-P
ORT
B
INDING
(IMPB)
C
OMMANDS
IP-MAC-Port Binding (IMPB) is a security application found on edge switches which are usually directly connected to
hosts. IMPB enables administrators to configure (or snoop) pairs of MAC and IP addresses that are allowed to access
networks through the switch. IP-MAC-Port Binding (IMPB) binds together the network layer IP address, and the Ethernet
link layer MAC address, and the receiving port, to allow the transmission of data between the layers.
The IP-MAC-Port Binding (IMPB) commands in the Command Line Interface (CLI) are listed (along with the appropriate
parameters) in the following table.
Command
Parameters
config address_binding ip_mac ports
[<portlist> | all ] { state [enable {[strict | loose] | [ipv6 | all ]} | disable {[ ipv6 | all ]}]
| allow_zeroip [enable | disable] | forward_dhcppkt [enable | disable] | mode [arp
| acl ] | stop_learning_threshold<int 0-500>} (1)
create address_binding ip_mac
ipaddress
< ipaddr > mac_address < macaddr > {ports [ portlist | all ]
create address_binding ip_mac
[ipaddress < ipaddr > | ipv6address <ipv6addr>] mac_address < macaddr > {
ports [ portlist | all]}
delete address_binding
[ip_mac [[ipaddress < ipaddr > | ipv6address <ipv6addr>] mac_address <
macaddr > | all] | blocked [ all | vlan_name < vlan_name > mac_address <
macaddr >]]
config address_binding ip_mac
[ipaddress < ipaddr > | ipv6address <ipv6addr>] mac_address < macaddr >
{ports [ portlist | all]}
show address_binding
[ip_mac [all | [ipaddress < ipaddr > | ipv6address <ipv6addr>] mac_address <
macaddr >] | blocked [all | vlan_name <vlan_name> mac_address <macaddr> ] |
ports {<portlist>}]
enable address_binding dhcp_snoop
{[ipv6 | all]}
disable address_binding dhcp_snoop
{[ipv6 | all]}
clear address_binding dhcp_snoop
binding_entry ports
[ <portlist>|all ] {[ipv6 | all]}
show address_binding dhcp_snoop
{[max_entry { ports <portlist>} | binding_entry {port <port>}]}
config address_binding dhcp_snoop
max_entry ports
[<portlist> | all] limit [<value 1-50> | no_limit]
enable address_binding trap_log
disable address_binding trap_log
config address_binding
recover_learning ports
[<portlist> | all]
enable address_binding nd_snoop
disable address_binding nd_snoop
show address_binding nd_snoop
show address_binding nd_snoop
binding_entry
{port <port>}
clear address_binding nd_snoop
binding_entry ports
[<portlist> | all]
debug address_binding
[event | dhcp | all]
no debug address_binding
