D-Link xStack DGS-3400 Series Reference Manual page 309

xStack
Each command is listed, in detail, in the following sections.
config address_binding ip_mac ports
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To enable IMPB on port 1:
DGS-3450:admin# config address_binding ip_mac ports 1 state enable
Command: config address_binding ip_mac ports 1 state enable
Success.
DGS-3450:admin#
config address_binding ip_mac ports
Purpose
Syntax
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch CLI Manual
Used to configure the state of IMPB on the switch for each port.
config address_binding ip_mac ports [< portlist >| all ] {state [ enable {[ strict | loose]} |
disable ] | allow_zeroip [enable | disable] | forward_dhcppkt [enable | disable]} (1)
Used to configure the per port state of IMPB on the switch.
If a port has been configured as group member of an aggregated link, then the IMPB function
cannot be enabled.
When the binding state is enabled for IP packets and ARP packets received by this port, the
switch will check whether the IP address and MAC address matches the binding entry. If the
packet does not match it will be dropped.
state - This parameter configures the IMPB port state to be enabled or disabled. When the
state is enabled, the port will perform the binding check.
strict - Used to implement a mode of strict control. When strict control is used, all ARP and IP
broadcast packets are sent to the CPU and checked for IMPB before forwarding. Packets
with MAC addresses that match IMPB entries are set to dynamic state while MAC addresses
with no match are set to block. All other packets are dropped. The default mode is strict if not
specified.
loose - Used to implement a more loose or less strict mode of control. In loose mode, ARP
and IP broadcast packets are sent to the CPU for IMPB checking. Packets are forwarded
unless the check finds a specified source MAC address that is blocked. Packets with MAC
addresses that match IMPB entries are set to dynamic state while MAC addresses with no
match are set to block. All other packets are bypassed.
allow_zeroip - Specify whether to allow an ARP packet with a source IP address of 0.0.0.0. If
the IP address 0.0.0.0 is not configured in the binding list and this setting is enabled, ARP
packets with the source IP address of 0.0.0.0 will be allowed; If the IP address 0.0.0.0 is not
configured in the binding list and this setting is set to disable, ARP packets with the source IP
address of 0.0.0.0 will not be allowed. This option does not affect the IMPB ACL Mode.
forward_dhcppkt - By default, DHCP packets with a broadcast DA will be flooded.
When set to disabled, the broadcast DHCP packet received by the specified port will not be
forwarded.
This setting is effective when DHCP Snooping is enabled, in this case DHCP packets trapped
by the CPU must be forwarded by the software.
This setting controls the forwarding behavior in this situation.
Only Administrator and Operator-level users can issue this command.
Used to configure the state of IMPB on the switch for each port.
config address_binding ip_mac ports [<portlist> | all ] { state [enable {[strict | loose] |
305