xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
152
Command Parameters
config address_binding ip_mac
ipaddress
<ipaddr> mac_address <macaddr> { ports [ portlist |
all ] }
delete address_binding
[ip-mac [ipaddress <ipaddr> mac_address <macaddr> |
all] | blocked [all | vlan_name <vlan_name>
mac_address <macaddr> ]]
show
address_binding
{ip_mac [all | ipaddress <ipaddr> mac_address
<macaddr> ]| blocked [ all | vlan_name <vlan_name>
mac_address <macaddr>] |ports}
enable address_binding dhcp_snoop
disable address_binding dhcp_snoop
clear address_binding dhcp_snoop
binding_entry ports
[<portlist>|all]
show address_binding dhcp_snoop
{[max_entry { ports <portlist>} | binding_entry {port
<port>}]}
config address_binding dhcp_snoop
max_entry ports
[<portlist> | all] limit [<value 1-50> | no_limit]
enable address_binding trap_log
disable address_binding trap_log
Each command is listed, in detail, in the following sections.
config address_binding ip_mac ports
Purpose
The config address_binding ip_mac ports command is used to configure
per port state of IP-MAC binding in the switch.
Syntax
[<portlist> | all ] {state [enable {[strict | loose]} | disable]
|allow_zeroip [enable | disable] | forward_dhcppkt [enable | disable] |
mode [ arp | acl ]}
Description
Use this command to configure per port state of IP-MAC binding on the
switch. If a port has been configured as a group member of an
aggregagted link, then it can not enable its ip mac binding function.
When the binding check state is enabled, for IP packet and ARP packet
received by this port, the switch will check whether the IP address and
MAC address match the binding entries, the packet will be dropped if they
did not match.
For this function, the switch can operate in ACL mode or ARP mode. In
either ARP mode or ACL mode, IP and ARP packets can be both be
checked. However when in ACL mode, the entry on this port will add an
ACL access entry automatically.
The configuration of an entry in the ACL mode will consume the
resources in the switch controller. An ACL mode entry may not be
effective. The status of the entry will display this information. When an
entry in not effective, the check for IP packet will not be performed. The
check for the ARP packet will still be performed.
For the check of ARP packet, both of the ARP request and reply packet
will be checked. The packet with source IP address not defined in the
source-validity binding entry or with source MAC address not defined in
the source-validity binding entry, or if the source IP address and source
