Installation manual

4-172
SIGNAMAX LLC • www.signamax.eu
ip source-guard binding
This command adds a static address to the source-guard binding table. Use the no form
to remove a static entry.
Syntax
ip source-guard binding mac-address vlan vlan-id ip-address interface ethernet
unit/port
no ip source-guard binding mac-address vlan vlan-id
• mac-address - A valid unicast MAC address.
• vlan-id - ID of a configured VLAN (Range: 1-4094)
• ip-address - A valid unicast IP address, including classful types A, B or C.
• unit - Stack unit. (Range: 1)
• port - Port number. (Range: 1-28)
Default Setting
No configured entries
Command Mode
Global Configuration
Command Usage
• Table entries include a MAC address, IP address, lease time, entry type
(Static-IP-SG-Binding, Dynamic-DHCP-Binding, VLAN identifier, and port
identifier.
• All static entries are configured with an infinite lease time, which is indicated with a
value of zero by the show ip source-guard command (page 4-173).
• When source guard is enabled, traffic is filtered based upon dynamic entries
learned via DHCP snooping, or static addresses configured in the source guard
binding table with this command.
• Static bindings are processed as follows:
- If there is no entry with same VLAN ID and MAC address, a new entry is added
to binding table using the type of static IP source guard binding.
- If there is an entry with same VLAN ID and MAC address, and the type of entry
is static IP source guard binding, then the new entry will replace the old one.
- If there is an entry with same VLAN ID and MAC address, and the type of the
entry is dynamic DHCP snooping binding, then the new entry will replace the old
one and the entry type will be changed to static IP source guard binding.
Example
This example configures a static source-guard binding on port 5.
Console(config)#ip source-guard binding 11-22-33-44-55-66 vlan 1
192.168.0.99 interface ethernet 1/5
Console(config-if)#