Edge-Core ECS4660-28F, Management Manual, Page: 435 / 2020

C
HAPTER
13
| Security Measures
IPv4 Source Guard
– 435 –
C
ONFIGURING
S
TATIC
B
INDINGS FOR
IP S
OURCE
G
UARD
Use the Security > IP Source Guard > Static Configuration page to bind a
static address to a port. Table entries include a MAC address, IP address,
lease time, entry type (Static, Dynamic), VLAN identifier, and port
identifier. All static entries are configured with an infinite lease time, which
is indicated with a value of zero in the table.
CLI R
EFERENCES
◆
"ip source-guard binding" on page 1134
C
OMMAND
U
SAGE
◆
Static addresses entered in the source guard binding table are
automatically configured with an infinite lease time. Dynamic entries
learned via DHCP snooping are configured by the DHCP server itself.
◆
Static bindings are processed as follows:
■
If there is no entry with the same VLAN ID and MAC address, a new
entry is added to the binding table using the type “static IP source
guard binding.”
■
If there is an entry with the same VLAN ID and MAC address, and
the type of entry is static IP source guard binding, then the new
entry will replace the old one.
■
If there is an entry with the same VLAN ID and MAC address, and
the type of the entry is dynamic DHCP snooping binding, then the
new entry will replace the old one and the entry type will be
changed to static IP source guard binding.
■
Only unicast addresses are accepted for static bindings.
P
ARAMETERS
These parameters are displayed:
Add
◆
Port – The port to which a static entry is bound.
◆
VLAN – ID of a configured VLAN (Range: 1-4094)
◆
MAC Address – A valid unicast MAC address.
◆
IP Address – A valid unicast IP address, including classful types A, B
or C.
Show
◆
VLAN – VLAN to which this entry is bound.
◆
MAC Address – Physical address associated with the entry.
◆
Interface – The port to which this entry is bound.