HP (Hewlett-Packard) 3400CL-24G Switch User Manual


 
112
Enhancements
Release M.10.35 Enhancements
To configure one or more Ethernet interfaces that handle VLAN traffic as trusted ports, enter the arp
protect trust command at the global configuration level. The switch does not check ARP requests and
responses received on a trusted port.
An example of the arp protect trust command is shown here:
ProCurve(config)# arp protect trust b1-b4, d1
Adding an IP-to-MAC Binding to the DHCP Database
A routing switch maintains a DHCP binding database, which is used for DHCP and ARP packet
validation. Both the DHCP snooping and DHCP Option 82 insertion features maintain the lease
database by learning the IP-to-MAC bindings on untrusted ports. Each binding consists of the client
MAC address, port number, VLAN identifier, leased IP address, and lease time.
If your network does not use DHCP or if some network devices have fixed, user-configured IP
addresses, you can enter static IP-to-MAC address bindings in the DHCP binding database. The switch
uses manually configured static bindings for DHCP snooping and dynamic ARP protection.
To add the static configuration of an IP-to-MAC binding for a port to the database, enter the ip source
binding command at the global configuration level.
Syntax: [no] arp protect trust <port-list>
port-list Specifies a port number or a range of port
numbers. Separate individual port numbers or
ranges of port numbers with a comma; for
example: c1-c3, c6.
Syntax: [no] ip source binding <mac-address> vlan <vlan-id> <ip-address>
interface <port-number>
mac-address Specifies a MAC address to bind with a VLAN
and IP address on the specified port in the
DHCP binding database.
vlan <vlan-id> Specifies a VLAN ID number to bind with the
specified MAC and IP addresses on the speci-
fied port in the DHCP binding database.
ip-address Specifies an IP address to bind with a VLAN
and MAC address on the specified port in the
DHCP binding database.
interface
<port-number>
Specifies the port number on which the IP-to-
MAC address and VLAN binding is configured
in the DHCP binding database.