Configuration Guide 550
Configuring Network Security
IP-MAC Binding Configurations
Step 2
ip source binding
hostname
ip-addr mac-addr
vlan
vlan-id
interface gigabitEthernet
port
{
none | arp-detection
} [ forced-source {
arp-scanning | dhcp-snooping
} ]
Manually bind the host name, IP address, MAC address, VLAN ID and port number of
the host, and configure the protect type for the host. In addition, you can change the
source of the entry as ARP Scanning or DHCP Snooping.
hostname
:
Specify a name for the host. It contains 20 characters at most.
ip-addr
:
Enter the IP address of the host.
mac-addr
:
Enter the MAC address of the host, in the format of xx:xx:xx:xx:xx:xx.
vlan-id
:
Enter the VLAN ID of the host.
port
:
Enter the number of the port on which the host is connected.
none | arp-detection
:
Specify the protect type for the entry. None indicates this entry
will not be applied to ARP Detection; arp-detection indicates this entry will be applied
to ARP Detection.
arp-scanning | dhcp-snooping:
Change the source of the entry to ARP Scanning or
DHCP Snooping.
Step 3
show ip source binding
Verify the binding entry.
Step 4
end
Return to privileged EXEC mode.
Step 5
copy running-config startup-config
Save the settings in the configuration file.
The following example shows how to bind an entry with the hostname host1, IP address
192.168.0.55, MAC address AA-BB-CC-DD-EE-FF, VLAN ID 10, port number 1/0/5, and
enable this entry for the ARP detection feature.
Switch#configure
Switch(config)#ip source binding
host1 192.168.0.55 aa:bb:cc:dd:ee:ff
vlan
10
interface
gigabitEthernet
1/0/5 arp-detection
Switch(config)#show ip source binding
U No. Host IP-Addr MAC-Addr VID Port ACL Col.
-- --- ------- -------- -------- ------ ----- ------ -----
1 1 host1 192.168.0.55 aa:bb:cc:dd:ee:ff 10 Gi1/0/5 ARP-D
Switch(config)#end
Switch#copy running-config startup-config
