User manual

C HAPTER 4 | Configuring the Switch
Configuring Security
– 113 –
Figure 37: Configuring Global and Port-based Settings for IP Source Guard
CONFIGURING STATIC BINDINGS FOR IP SOURCE GUARD
Use the Static IP Source Guard Table to bind a static address to a port.
Table entries include a port identifier, VLAN identifier, IP address, and
subnet mask. All static entries are configured with an infinite lease time.
PATH
Advanced Configuration, Security, Network, IP Source Guard, Static Table
COMMAND USAGE
◆ Static addresses entered in the source guard binding table are
automatically configured with an infinite lease time. Dynamic entries
learned via DHCP snooping are configured by the DHCP server itself.
◆ Static bindings are processed as follows:
■
If there is no entry with the same VLAN ID and MAC address, a new
entry is added to the static IP source guard binding table.
■
If there is an entry with the same VLAN ID and MAC address, and
the type of entry is static IP source guard binding, then the new
entry will replace the old one.
■
If there is an entry with the same VLAN ID and MAC address, and
the type of the entry is dynamic DHCP snooping binding, then the
new entry will replace the old one and the entry type will be
changed to static IP source guard binding.
■
Only unicast addresses are accepted for static bindings.
PARAMETERS
These parameters are displayed:
◆ Port – The port to which a static entry is bound.
◆ VLAN ID – ID of a configured VLAN (Range: 1-4095)