Filter
Top Products
IP S
OURCE
G
UARD
C
OMMANDS
4-267
ip source-guard binding
This command adds a static address to the source-guard binding table. Use
the no form to remove a static entry.
Syntax
ip source-guard mac-address vlan vlan-id ip-address interface ethernet
unit/port
no ip source-guard mac-address vlan vlan-id
• mac-address - A valid unicast MAC address.
• vlan-id - ID of a configured VLAN (Range: 1-4094)
• ip-address - A valid unicast IP address, including classful types A, B
or C.
• unit - Stack unit. (Always unit 1)
• port - Port number.
Default Setting
No configured entries
Command Mode
Global Configuration
Command Usage
• Table entries include a MAC address, IP address, lease time, entry type
• (Static-IP-SG-Binding, Dynamic-DHCP-Binding,
Static-DHCP-Binding), VLAN identifier, and port identifier.
• All static entries are configured with an infinite lease time, which is
indicated with a value of zero by the show ip source-guard
command (page 4-268).
• When source guard is enabled, traffic is filtered based upon dynamic
entries learned via DHCP snooping, static entries configured in the
DHCP snooping table, or static addresses configured in the source
guard binding table with this command.
• Static bindings are processed as follows:
- If there is no entry with same VLAN ID and MAC address, a new
entry is added to binding table using the type of static IP source
guard binding.