HP 3400CL-24G manual Adding an IP-to-MAC Binding to the Dhcp Database

Enhancements

Release M.10.35 Enhancements

To configure one or more Ethernet interfaces that handle VLAN traffic as trusted ports, enter the arp protect trust command at the global configuration level. The switch does not check ARP requests and responses received on a trusted port.

Syntax: [no] arp protect trust <port-list>

port-listSpecifies a port number or a range of port numbers. Separate individual port numbers or ranges of port numbers with a comma; for example: c1-c3, c6.

An example of the arp protect trust command is shown here:

ProCurve(config)# arp protect trust b1-b4, d1

Adding an IP-to-MAC Binding to the DHCP Database

A routing switch maintains a DHCP binding database, which is used for DHCP and ARP packet validation. Both the DHCP snooping and DHCP Option 82 insertion features maintain the lease database by learning the IP-to-MAC bindings on untrusted ports. Each binding consists of the client MAC address, port number, VLAN identifier, leased IP address, and lease time.

If your network does not use DHCP or if some network devices have fixed, user-configured IP addresses, you can enter static IP-to-MAC address bindings in the DHCP binding database. The switch uses manually configured static bindings for DHCP snooping and dynamic ARP protection.

To add the static configuration of an IP-to-MAC binding for a port to the database, enter the ip source binding command at the global configuration level.

Syntax: [no] ip source binding <mac-address> vlan <vlan-id> <ip-address> interface <port-number>

mac-addressSpecifies a MAC address to bind with a VLAN and IP address on the specified port in the DHCP binding database.

vlan <vlan-id>Specifies a VLAN ID number to bind with the specified MAC and IP addresses on the speci- fied port in the DHCP binding database.

ip-addressSpecifies an IP address to bind with a VLAN and MAC address on the specified port in the DHCP binding database.

interface Specifies the port number on which the IP-to- <port-number>MAC address and VLAN binding is configured in the DHCP binding database.

112