Access Security Guide K/KA/KB.15.15

Syntax
[no]ip source-binding <mac-address> vlan
<vlan-id><ip-address>interface <port-number>
mac-address
Specifies a MAC address to bind with a VLAN and IP address on the specified
port in the DHCP binding database.
vlan-id
Specifies a VLAN ID number to bind with the specified MAC and IP addresses
on the specified port in the DHCP binding database.
ip-address
Specifies an IP address to bind with a VLAN and MAC address on the specified
port in the DHCP binding database.
<port-number>
Specifies the port number on which the IP-to- MAC address and VLAN binding
is configured in the DHCP binding database.
An example of the ip source-binding command is shown here:
HP Switch(config)# ip source-binding 0030c1-7f49c0
interface vlan 100 10.10.20.1 interface A4
NOTE: Note that the ip source-binding command is the same command used by the
Dynamic IP Lockdown feature to configure static bindings. The Dynamic ARP Protection and Dynamic
IP Lockdown features share a common list of source IP-to-MAC bindings.
Displaying the static configuration of IP-to-MAC bindings
To display the static configurations of IP-to-MAC bindings stored in the DHCP lease database, enter
the show ip source-lockdown bindings command.
Syntax
show ip source-lockdown bindings [port-number]
port-number
(Optional) Specifies the port number on which source IP-to-MAC address and
VLAN bindings are configured in the DHCP lease database.
An example of the show ip source-lockdown bindings command output
is shown in Figure 11-6.
Figure 278 Show ip source-lockdown bindings command output
380 Port Security