TP-Link TL-SG5426 User Guide - Page 469
ip source-guard binding
UPC - 845973020729
View all TP-Link TL-SG5426 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 469 highlights
4 IP Source Guard Commands is static IP source guard binding, static DHCP snooping binding or dynamic DHCP snooping binding, the packet will be forwarded. - If IP source guard if enabled on an interface for which IP source bindings (dynamically learned via DHCP snooping or manually configured) are not yet configured, the switch will drop all IP traffic on that port, except for DHCP packets. Example This example enables IP source guard on port 5. Console(config)#interface ethernet 1/5 Console(config-if)#ip source-guard sip Console(config-if)# Related Commands ip source-guard binding (4-229) ip dhcp snooping (4-231) ip dhcp snooping vlan (4-233) ip source-guard binding This command adds a static address to the source-guard binding table. Use the no form to remove a static entry. Syntax ip source-guard binding mac-address vlan vlan-id ip-address interface ethernet unit/port no ip source-guard binding mac-address vlan vlan-id • mac-address - A valid unicast MAC address. • vlan-id - ID of a configured VLAN (Range: 1-4094) • ip-address - A valid unicast IP address, including classful types A, B or C. • unit - Stack unit. (Range: Unit 1) • port - Port number. (Range: 1-26) Default Setting No configured entries Command Mode Global Configuration Command Usage • Table entries include a MAC address, IP address, lease time, entry type (Static-IP-SG-Binding, Dynamic-DHCP-Binding, Static-DHCP-Binding), VLAN identifier, and port identifier. • All static entries are configured with an infinite lease time, which is indicated with a value of zero by the show ip source-guard command (page 4-230). • When source guard is enabled, traffic is filtered based upon dynamic entries learned via DHCP snooping, static entries configured in the DHCP snooping 4-229