D-Link DGS-3620-52P Manual page 539

xStack® DGS-3620 Series Layer 3 Managed Stackable Gigabit Switch CLI Reference Guide
DGS-3620-28SC:admin# create address_binding ip_mac ipv6address
fe80::240:5ff:fe00:28 mac_address 00-00-00-00-00-11
Command: create address_binding ip_mac ipv6address fe80::240:5ff:fe00:28
mac_address 00-00-00-00-00-11
Success.
DGS-3620-28SC:admin#
46-3 config address_binding ip_mac ports
Description
This command is used to configure the per port state of IP-MAC-Port binding in the switch. If a port
has been configured as group member of an aggregated link, then it can not enable its IP-MAC-
Port binding function. When the binding check state is enabled, for IP packet and ARP packet
received by this port, the switch will check whether the the IP address and MAC address match the
binding entries. The packets will be dropped if they do not match. For this function, the switch can
operate in ARP Inspection and IP Inspection.
ARP Inspection: All ARP packets will be checked while ARP Inspection is enabled. The legal
ARP packets will be forwarded, while the illegal ARP packets will be dropped.
IP Inspection: All IP packets will be checked while IP Inspection is enabled. The legal IP packets
will be forwarded, while the illegal IP packets will be dropped. When IP Inspection is enabled, and
ARP Inspection is disabled, all non-IP packets (L2 packets, ARP...) will be forwarded by default.
Format
config address_binding ip_mac ports [<portlist> | all] {arp_inspection [strict | loose |
disable] | ip_inspection [enable | disable] | protocol [ipv4 | ipv6 | all] | allow_zeroip [enable |
disable] | forward_dhcppkt [enable | disable] | stop_learning_threshold <int 0-500>}(1)
Parameters
<portlist> - Specify a range of ports to configure.
all - Specify to configure all ports.
arp_inspection - (Optional) Specifies that when the ARP inspection function is enabled, the legal
ARP packets wil be forwarded, while the illegal packets will be dropped.
strict - Specifies that in this mode, all packets are dropped by default until a legal ARP or IP
packet is detected.
loose - Specifies that in this mode, all packets are forwarded by default until an illegal ARP or
broadcast IP packet is detected.
disable - Disable the ARP inspection function. The default value is disable.
ip_inspection - (Optional) Specifies the IP inspection function state.
enable - Specifies to enable the IP inspection function. The legal IP packets will be forwarded,
while the illegal IP packets will be dropped.
disable - Specifies to disable the IP inspection function. The default value is disable.
protocol - (Optional) Specifies the IP protocoal of the packets that will be checked.
ipv4 - Specifies that only IPv4 packets will be checked.
ipv6 - Specifies that only IPv6 packets will be checked.
all - Specifies that both IPv4 and IPv6 packets will be checked.
allow_zeroip - (Optional) Specify whether to allow ARP packets with SIP address 0.0.0.0.
enable - If 0.0.0.0 is not configured in the binding list, when it is set to enabled, the ARP
packet with this source IP address 0.0.0.0 will be allowed.
disable - When set to disable, this option does not affect the IP-MAC-port binding IP
534