HP 6120G/XG HP ProCurve Series 6120 Blade Switches Access Security Guide - Page 418
Adding an IP-to-MAC Binding to the DHCP Database, ip source-binding, interface
View all HP 6120G/XG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 418 highlights
Configuring Advanced Threat Protection Dynamic ARP Protection Note Adding an IP-to-MAC Binding to the DHCP Database A routing switch maintains a DHCP binding database, which is used for DHCP and ARP packet validation. Both the DHCP snooping and DHCP Option 82 insertion features maintain the lease database by learning the IP-to-MAC bindings on untrusted ports. Each binding consists of the client MAC address, port number, VLAN identifier, leased IP address, and lease time. If your network does not use DHCP or if some network devices have fixed, user-configured IP addresses, you can enter static IP-to-MAC address bindings in the DHCP binding database. The switch uses manually configured static bindings for DHCP snooping and dynamic ARP protection. To add the static configuration of an IP-to-MAC binding for a port to the database, enter the ip source-binding command at the global configuration level. Syntax: [no] ip source-binding vlan interface mac-address Specifies a MAC address to bind with a VLAN and IP address on the specified port in the DHCP binding database. vlan Specifies a VLAN ID number to bind with the specified MAC and IP addresses on the speci fied port in the DHCP binding database. ip-address Specifies an IP address to bind with a VLAN and MAC address on the specified port in the DHCP binding database. interface Specifies the port number on which the IP-to MAC address and VLAN binding is configured in the DHCP binding database. An example of the ip source-binding command is shown here: ProCurve(config)# ip source-binding 0030c1-7f49c0 interface vlan 100 10.10.20.1 interface A4 Note that the ip source-binding command is the same command used by the Dynamic IP Lockdown feature to configure static bindings. The Dynamic ARP Protection and Dynamic IP Lockdown features share a common list of source IP-to-MAC bindings. 10-20