23 DHCP Snooping
Figure 23-5 Overview of terminal filtering (example of terminal filtering for source IP
This discards packets with source IP addresses and source MAC addresses that have not
been registered in the binding database.
(2) Permitting communication by a terminal with a fixed-IP address
You can permit communication by a terminal with a fixed-IP address (such as a department
server) connected to an untrusted port, by statically registering terminal information in the
binding database.
To permit communication by a terminal with a fixed-IP address, use the
configuration command and register the following information:
Terminal IP address
Terminal MAC address.
Number of the port or channel group to which the terminal is connected
ID of the VLAN containing the port or channel group to which the terminal is
connected
For details about the number of entries that can be set by this command, see Table 23-2
Items registered in the binding database.
410
addresses and source MAC addresses)
ip source binding