SMC Networks TigerAccess SMC7816M - Manual (Page 602)

C
LIENT
S
ECURITY
C
OMMANDS
23-14
ip source-guard binding
This command adds a static address to the source-guard binding table. Use
the no form to remove a static entry.
Syntax
ip source-guard binding mac-address vlan vlan-id ip-address
interface ethernet unit/port
no ip source-guard binding mac-address vlan vlan-id
• mac-address - A valid unicast MAC address.
• vlan-id - ID of a configured VLAN (Range: 1-4093)
• ip-address - A valid unicast IP address, including classful types A, B or
C.
• unit - Stack unit. (Range: 1)
• port - Port number. (Range: 1-48)
Default Setting
No configured entries
Command Mode
Global Configuration
Command Usage
• Table entries include a MAC address, IP address, lease time, entry type
(Static-IP-SG-Binding, Dynamic-DHCP-Binding,
Static-DHCP-Binding), VLAN identifier, and port identifier.
• All static entries are configured with an infinite lease time, which is
indicated with a value of zero by the show ip source-guard command
(page 23-15).
• When source guard is enabled, traffic is filtered based upon dynamic
entries learned via DHCP snooping, or static addresses configured in
the source guard binding table with this command.
• Static bindings are processed as follows:
- If there is no entry with same VLAN ID and MAC address, a new
entry is added to binding table using the type of static IP source
guard binding.