Edge-Core ECS2100-10T Reference Manual page 299

unit - Unit identifier. (Range: 1)
port-list - Physical port number or list of port numbers. Separate
nonconsecutive port numbers with a comma and no spaces; or use a
hyphen to designate a range of port numbers. (Range: 1-10/28)
Default Setting
No configured entries
Command Mode
Global Configuration
Command Usage
◆
If the binding mode is not specified in this command, the entry is bound to the
ACL table by default.
◆
Table entries include a MAC address, IP address, lease time, entry type (Static-IP-
SG-Binding, Dynamic-DHCP-Binding), VLAN identifier, and port identifier.
◆
All static entries are configured with an infinite lease time, which is indicated
with a value of zero by the
◆
When source guard is enabled, traffic is filtered based upon dynamic entries
learned via DHCP snooping, or static addresses configured in the source guard
binding table with this command.
◆
An entry with same MAC address and a different VLAN ID cannot be added to
the binding table.
◆
Static bindings are processed as follows:
A valid static IP source guard entry will be added to the binding table in
■
ACL mode if one of the following conditions is true:
If there is no binding entry with the same VLAN ID and MAC address, a
■
new entry will be added to the binding table using the type of static IP
source guard binding.
If there is an entry with the same VLAN ID and MAC address, and the
■
type of entry is static IP source guard binding, then the new entry will
replace the old one.
If there is an entry with the same VLAN ID and MAC address, and the
■
type of the entry is dynamic DHCP snooping binding, then the new
entry will replace the old one and the entry type will be changed to
static IP source guard binding.
A valid static IP source guard entry will be added to the binding table in
■
MAC mode if one of the following conditions are true:
If there is no binding entry with the same IP address and MAC address,
■
a new entry will be added to the binding table using the type of static
IP source guard binding entry.
Chapter 9
show ip source-guard
– 299 –
| General Security Measures
IPv4 Source Guard
command (page 304).