Static Ip Source Binding; Displaying Ip Source Guard Configuration - Siemens S223 User Manual

UMN:CLI
!
!
8.8.8.2
8.8.8.3
262
To enable IP source guard, DHCP snooping needs to be enabled.
To enable IP source guard with a source IP address filtering on a port, use the following
command.
Command
ip dhcp verify source PORTS
no ip dhcp verify source PORTS
To enable IP source guard with a source IP address and MAC address filtering on a port,
use the following command.
Command
ip dhcp verify source port-
security PORTS
no ip dhcp verify source port-
security PORTS
You cannot configure IP source guard with the ip dhcp verify source and ip dhcp verify
source port-security commands together.

Static IP Source Binding

The IP source binding table has bindings that are learned by DHCP snooping or manually
specified with the ip dhcp verify source binding command. The switch uses the IP
source binding table only when IP source guard is enabled.
To specify a static IP source binding entry, use the following command.
Command
ip dhcp verify source binding
<1-4094> PORT A.B.C.D MAC-
ADDR
no ip dhcp verify source binding
{A.B.C.D | all }

Displaying IP Source Guard Configuration

To display IP source binding table, use the following command.
Command
show ip dhcp verify source
binding
SURPASS hiD 6615 S223/S323 R1.5
Mode
Enables IP source guard with a source IP address
filtering on a port.
Global
Disables IP source guard.
Mode
Enables IP source guard with a source IP address and
MAC address filtering on a port.
Global
Disables IP source guard.
Mode
Specifies a static IP source binding entry.
1-4094: VLAN ID
PORT: port number
A.B.C.D: IP address
Global
MAC-ADDR: MAC address
Deletes a specified static IP source binding.
Mode
Enable
Shows IP source binding entries.
Global
User Manual
Description
Description
Description
Description
A50010-Y3-C150-2-7619