Motorola EX-3524 Cli Reference Manual page 251

Command Usage
◆
Table entries include a MAC address, IP address, lease time, entry type (Static-IP-
SG-Binding, Dynamic-DHCP-Binding), VLAN identifier, and port identifier.
◆
All static entries are configured with an infinite lease time, which is indicated
with a value of zero by the
◆
When source guard is enabled, traffic is filtered based upon dynamic entries
learned via DHCP snooping, or static addresses configured in the source guard
binding table with this command.
◆
Static bindings are processed as follows:
If there is no entry with same VLAN ID and MAC address, a new entry is
■
added to binding table using the type of static IP source guard binding.
If there is an entry with same VLAN ID and MAC address, and the type of
■
entry is static IP source guard binding, then the new entry will replace the
old one.
If there is an entry with same VLAN ID and MAC address, and the type of the
■
entry is dynamic DHCP snooping binding, then the new entry will replace
the old one and the entry type will be changed to static IP source guard
binding.
Example
This example configures a static source-guard binding on port 5.
Console(config)#ip source-guard binding 00-ab-cd-11-22-33 vlan 1 192.168.0.99
interface ethernet 1/5
Console(config-if)#
Related Commands
ip source-guard (252)
ip dhcp snooping (242)
ip dhcp snooping vlan (246)
Chapter 8
show ip source-guard
– 251 –
| General Security Measures
IP Source Guard
command (page 254).