D-Link xStack DES-3500 Series Manual page 134

To configure address binding on the Switch for ACL mode:
config address_binding ip_mac ports
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To configure address binding on the Switch:
DES-3500 Layer 2 Fast Ethernet Switch CLI Reference Manual
DES-3526:admin#config address_binding ip_mac
ipaddress 10.1.1.3 mac_address 00-00-00-00-00-
05
Command: config address_binding ip_mac
ipaddress 10.1.1.3 mac_address 00-00-00-00-00-
05
Success.
DES-3526:admin#
DES-3526:admin#config address_binding ip_mac
ipaddress 10.1.1.3 mac_address 00-00-00-00-
00-05 mode acl
Command: config address_binding ip_mac
ipaddress 10.1.1.3 mac_address 00-00-00-00-
00-05 mode acl
Success.
DES-3526:admin#
Used to configure an IP-MAC state to enable or disable for specified ports.
config address_binding ip_mac ports [<portlist> | all] state [enable
{[strict | loose]} | disable ]
This command will configure IP-MAC state to enable or disable for specified
ports.
<portlist> − Specifies a port or range of ports.
all – specifies all ports on the switch.
state [enable | disable] – Enables or disables the specified range of ports.
strict - This mode provides a more stricted way of control. If user chooses it,
all packets will be sent to CPU, thus all packets will not be forwarded by the
hardware until the S/W learn entries for the port. The port will check ARP
packets and IP packets by IP-MAC-PORT Binding entries. The packet is
found by the entry, the MAC address will be set to dynamic. The packet is
not found by the entry, the MAC address will be set to block. Other packets
will be dropped. The default mode is strict if not specified. The ports with
strict mode will capture unicast DHCP packets by ACL module. When IP-
MAC-PORT Binding DHCP-snoop enables and user choose this mode, the
device will create an ACL profile and the rules according to the ports. If there
are not enough ACL profiles or rules, the device will return warning message
and will not create ACL profile and rules to capture unicast DHCP packets.
loose - This mode provides a more loose way of control. If user chooses it,
ARP packets and IP Broadcast packets will go to CPU. The packet will still
be forwarded by the hardware until a specific source MAC address is
blocked by the software. The port will check ARP packets and IP Broadcast
packets by IP-MAC-PORT Binding entries . The packet is found by the entry,
the MAC address will be set to dynamic. The packet is not found by the
entry, the MAC address will be set to block. Other packets will be bypassed.
User Account Command Level – Administrator and Operator.
130