DHCP Snooping and ARP Inspection Commands
78-21075-01 Command Line Interface Reference Guide
User Guidelines
IP Source Guard must be enabled globally before enabling IP Source Guard on an
interface.
IP Source Guard is active only on DHCP snooping untrusted interfaces, and if at
least one of the interface VLANs are DHCP snooping enabled.
Example
The following example enables IP Source Guard on gi5.
switchxxxxxx(config)#
switchxxxxxx(config-if)#
42.13 ip source-guard binding
Use the ip source-guard binding Global Configuration mode command to
configure the static IP source bindings on the device. Use the no form of this
command to delete the static bindings.
Syntax
ip source-guard binding
no ip source-guard binding
Parameters
•
mac-address—Specifies a MAC address.
•
vlan-id—Specifies a VLAN number.
•
ip-address—Specifies an IP address.
•
interface-id—Specifies an interface ID. The interface ID can be one of the
following types: Ethernet port or Port-channel.
Default Configuration
No static binding exists.
Command Mode
Global Configuration mode
interface gi5
ip source-guard
mac-address vlan-id ip-address
mac-address vlan-id
42
interface-id
{
}
691