Show Ip Dhcp Snooping Binding; Ip Source Guard; Ip Source-Guard Binding; Table 88: Ip Source Guard Commands - Edge-Core ECS4810-12M Layer 2 Management Manual

| General Security Measures
C 26
HAPTER

IP Source Guard

show ip dhcp
snooping binding
IP S G
OURCE UARD
ip source-guard
binding
This command shows the DHCP snooping binding table entries.
C M
OMMAND ODE
Privileged Exec
E
XAMPLE
Console#show ip dhcp snooping binding
MAC Address IP Address
----------------- --------------- ---------- -------------------- ---- ---------
11-22-33-44-55-66 192.168.0.99
Console#
IP Source Guard is a security feature that filters IP traffic on network
interfaces based on manually configured entries in the IP Source Guard
table, or dynamic entries in the DHCP Snooping table when enabled (see
"DHCP Snooping" on page
traffic attacks caused when a host tries to use the IP address of a neighbor
to access the network. This section describes commands used to configure
IP Source Guard.

Table 88: IP Source Guard Commands

Command

ip source-guard binding

ip source-guard
ip source-guard max-
binding
show ip source-guard
show ip source-guard
binding
This command adds a static address to the source-guard binding table. Use
the no form to remove a static entry.
S
YNTAX
ip source-guard binding mac-address vlan vlan-id ip-address
interface ethernet unit/port
no ip source-guard binding mac-address vlan vlan-id
mac-address - A valid unicast MAC address.
vlan-id - ID of a configured VLAN (Range: 1-4093)
– 778 –
Lease(sec) Type
0 Dynamic-DHCPSNP
769). IP source guard can be used to prevent
Function
Adds a static address to the source-guard binding
table
Configures the switch to filter inbound traffic based
on source IP address, or source IP address and
corresponding MAC address
Sets the maximum number of entries that can be
bound to an interface
Shows whether source guard is enabled or disabled
on each interface
Shows the source guard binding table
VLAN Interface
1 Eth 1/5
Mode
GC
IC
IC
PE
PE