Table of Contents
Advertisement
Raisecom
ISCOM2600G-HI (A) Series Configuration Guide
10.8.5 Configuring IP Source Guard binding
Configuring IP Source Guard static binding
Configure IP Source Guard static binding for the ISCOM2600G-HI series switch as below.
Step
1
2
3
Configuring IP Source Guard dynamic binding
Configure IP Source Guard dynamic binding for the ISCOM2600G-HI series switch as below.
Step
1
2
Configuring binding translation
Configure binding translation for the ISCOM2600G-HI series switch as below.
Raisecom#config
Raisecom(config)#ip verify source
Raisecom(config)#ip source binding
ip-mask-address
[
id
interface-type interface-number
}
The configured static binding does not take effect when global static binding is
disabled. Only when global static binding is enabled can the static binding take
effect.
For an identical IP address, the manually configured static binding will cover the
dynamic binding. However, it cannot cover the existing static binding. When the
static binding is deleted, the system will recover the covered dynamic binding
automatically.
Command
Raisecom#config
Raisecom(config)#ip verify
source dhcp-snooping
The dynamic binding learnt through DHCP Snooping does not take effect when
global dynamic binding is disabled. Only when global dynamic binding is enabled
can the dynamic binding take effect.
If an IP address exists in the static binding table, the dynamic binding does not
take effect. In addition, it cannot cover the existing static binding.
Raisecom Proprietary and Confidential
Copyright © Raisecom Technology Co., Ltd.
Command
ip-address
mac-address
|
| vlan
Enter global configuration mode.
Enable IP Source Guard dynamic binding.
Description
Enter global
configuration mode.
Enable IP Source
Guard static binding.
Configure static
vlan-
binding.
Description
10 Security
441
Advertisement
Table of Contents
