Edge-Core ECS4660-28F, Management Manual, Page: 1134 / 2020

C
HAPTER
29
| General Security Measures
IPv4 Source Guard
– 1134 –
ip source-guard
binding
This command adds a static address to the source-guard ACL or MAC
address binding table. Use the no form to remove a static entry.
S
YNTAX
ip source-guard binding [ mode { acl | mac }] mac-address
vlan vlan-id ip-address interface ethernet unit/port
no ip source-guard binding [ mode { acl | mac }] mac-address
vlan vlan-id
mode - Specifies the binding mode.
acl - Adds binding to ACL table.
mac - Adds binding to MAC address
mac-address - A valid unicast MAC address table.
vlan-id - ID of a configured VLAN (Range: 1-4094)
ip-address - A valid unicast IP address, including classful types A, B
or C.
unit - Unit identifier. (Range: 1)
port - Port number. (Range: 1-28)
D
EFAULT
S
ETTING
No configured entries
C
OMMAND
M
ODE
Global Configuration
C
OMMAND
U
SAGE
◆
If the binding mode is not specified in this command, the entry is bound
to the ACL table by default.
◆
Table entries include a MAC address, IP address, lease time, entry type
(Static-IP-SG-Binding, Dynamic-DHCP-Binding), VLAN identifier, and
port identifier.
◆
All static entries are configured with an infinite lease time, which is
indicated with a value of zero by the show ip source-guard command
( page 1139 ).
◆
When source guard is enabled, traffic is filtered based upon dynamic
entries learned via DHCP snooping, or static addresses configured in
the source guard binding table with this command.
◆
Static bindings are processed as follows:
■
If there is no entry with same VLAN ID and MAC address, a new
entry is added to binding table using the type of static IP source
guard binding.