Edge-Core ES4624-SFP Basic Management Manual page 485

Function： Enable the DHCP Snooping binding ARP funciton.
Parameters：None
Command Mode：Globe mode
Default Settings： DHCP Snooping binding ARP funciton is disabled by default.
Usage Guide： When this function is enbaled, DHCP SNOOPING will add binding ARP
list entries according to binding information. Only after the binding function is enabled,
can the binding ARP function be enabled. Binding ARP list entries are static entries
without configuration of reservation, and will be added to the NEIGHBOUR list directly.
The priority of binding ARP list entries is lower than the static ARP list entries set by
administrator, so can be overwritten by static ARP list entries; but, when static ARP list
entries are deleted, the binding ARP list entries can not be recovered untill the DHCP
SNOOPING recapture the biding inforamtion. Adding binding ARP list entries is used to
prevent these list entried from being attacked by ARP cheating. At the same time, these
static list entries need no reauthenticaiton, which can prenvent the switch from the failing
to reauthenticate ARP when it is being attacked by ARP scanning.
Only after the DHCP SNOOPING binding function is enabled, the binding ARP
function can be set.
Example：Enable the DHCP Snooping binding ARP funciton.
switch(config)#ip dhcp snooping binding arp
Relative Command：ip dhcp snooping binding enable
17.2.2.13 ip dhcp snooping binding dot1x
Command：ip dhcp snooping binding dot1x
no ip dhcp snooping binding dot1x
Function： Enable the DHCP Snooping binding DOT1X funciton.
Parameters：None
Command Mode：Port mode
Default Settings：By default, the binding DOT1X funciton is disabled on all ports.
Usage Guide： When this function is enabled, DHCP SNOOPING will notify the DOT1X
module about the captured bindng information as a DOT1X controlled user. This
command is mutually exclusive to"ip dhcp snooping binding user-contro"command.
Only after the DHCP SNOOPING binding function is enabled, the binding ARP
function can be set.
Example：Enable the binding DOT1X funciton on port ethernet1/1
switch(config)#interface ethernet 1/1
switch(Config- Ethernet 1/1)# ip dhcp snooping binding dot1x
Relative Command：ip dhcp snooping binding enable
ip dhcp snooping binding user-control
485