Filter
Top Products
DES-7200 Configuration Guide Chapter 11 IP Source Guard Configuration
11-5
11.2.2 Configuring Static IP Source
Address Binding User
Under certain circumstances, users under certain ports may expect to statically use
certain IP addresses. This feature can be realized by adding static user information
into the IP source binding database.
Command Description
DES-7200# configure terminal
Enter configuration mode
DES-7200(config)# [no] ip source
binding mac-address vlan vlan_id
ip-address [ interface interface-id |
ip-mac | ip-only ]
Add static IP source binding user into the
database. If the interface is not specified,
the binding entry will apply to all binding
interfaces on the VLAN.
interface: bind to interface;
ip-mac: global IP+MAC binding;
ip-only: global IP binding.
The following example shows how to bind a static user to port 9 of the device:
DES-7200# configure terminal
DES-7200(config)# ip source binding 00d0.f801.0101 vlan 1 192.168.4.243 interface
FastEthernet 0/9
11.3 Showing IP Source
Guard Configuration
11.3.1 Showing IP Source Guard
Filtering Entry
Use this command to show IP Source Guard filtering entry.
Command Description
DES-7200# show ip verify
source [interface interface]
Show IP Source Guard filtering entry.
For example:
DES-7200 # show ip verify source
Interface Filter-type Filter-mode Ip-address Mac-address VLAN
--------------- --------- ----------- ---------- ----------- ------
FastEthernet 0/3 ip active 3.3.3.3 1
FastEthernet 0/3 ip active deny-all
FastEthernet 0/4 ip+mac active 4.4.4.4 0000.0000.0001 1