D-Link DXS-3600 Series Cli Reference Manual page 683

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
Default
By default, this option is disabled.
Command Mode
Interface Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
When a port is enabled for IMPB strict-mode access control, a host can only access the port after the
host sends ARP or IP packets and the ARP packet or IP packet sent by the host passes the binding
check. To pass the binding check, the source IP address, source MAC address, VLAN ID, and arrival port
number must match any of the entries defined by either the IP source guard static binding entry or the
DHCP snooping learned dynamic binding entry.
When a port is enabled for IMPB loose-mode access control, a host will be denied to access the port
after the host sends ARP or IP packets and the ARP packet or IP packet sent by the host does not pass
the binding check. To pass the binding check, the source IP address, source MAC address, VLAN ID,
and arrival port must match any of the entries defined by either the IP source guard static binding entry or
the DHCP snooping learned dynamic binding entry.
Example
This example shows how to enable the strict-mode IMPB access control on Ethernet 1/0/10.
Switch# configure terminal
Switch(config)# interface ethernet 1/0/10
Switch(config-if)# ip ip-mac-port-binding strict
Switch(config-if)#
54-3 show ip ip-mac-port-binding
This command is used to display the IMPB configuration settings or the entries blocked by IMPB access
control.
show ip ip-mac-port-binding [interface INTERFACE-ID [, | -]] [violation]
Parameters
interface INTERFACE-ID
,
-
violation
Default
None.
Command Mode
User EXEC or Any Configuration Mode.
(Optional) Specifies to display for the specified interface.
(Optional) Specifies a series of interfaces, or separate a range of
interfaces from a previous range. No space is allowed before and after
the comma.
(Optional) Specifies a range of interfaces. No space is allowed before
and after the hyphen.
(Optional) Specifies to display the blocked entry.
678