TP-Link T2600G-18TSTL-SG3216 T2600G-18TSUN V1 Configuration Guide - Page 759

Configuring Network Security IP-MAC Binding Configurations 2.2.1 Binding Entries Manually You can manually bind the IP address, MAC address, VLAN ID and the Port number together on the condition that you have got the related information of the hosts. Follow these steps to manually bind entries: Step 1 configure Enter global configuration mode. Step 2 ip source binding hostname ip-addr mac-addr vlan vlan-id interface gigabitEthernet port { none | arp-detection | ip-verify-source | both } [ forced-source {arp-scanning | dhcp-snooping} ] Manually bind the host name, IP address, MAC address, VLAN ID and port number of the host, and configure the protect type for the host. In addition, you can change the source of the entry as ARP Scanning or DHCP Snooping. hostname: Specify a name for the host. It contains 20 characters at most. ip-addr: Enter the IP address of the host. mac-addr: Enter the MAC address of the host, in the format of xx:xx:xx:xx:xx:xx. vlan-id: Enter the VLAN ID of the host. port: Enter the number of the port on which the host is connected. none | arp-detection | ip-verify-source | both: Specify the protect type for the entry. None indicates this entry will not be applied to ARP Detection; arp-detection indicates this entry will be applied to ARP Detection. arp-scanning | dhcp-snooping: Change the source of the entry to ARP Scanning or DHCP Snooping. Step 3 show ip source binding Verify the binding entry. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. The following example shows how to bind an entry with the hostname host1, IP address 192.168.0.55, MAC address AA-BB-CC-DD-EE-FF, VLAN ID 10, port number 1/0/5, and enable this entry for the ARP detection feature. Switch#configure Switch(config)#ip source binding host1 192.168.0.55 aa:bb:cc:dd:ee:ff vlan 10 interface gigabitEthernet 1/0/5 arp-detection Configuration Guide 729