Siemens S323, S223 user manual Static IP Source Binding, Displaying IP Source Guard Configuration

UMN:CLI	User Manual
	SURPASS hiD 6615 S223/S323 R1.5

!

To enable IP source guard, DHCP snooping needs to be enabled.

To enable IP source guard with a source IP address filtering on a port, use the following command.

Command	Mode	Description
ip dhcp verify source PORTS		Enables IP source guard with a source IP address
	Global	filtering on a port.
no ip dhcp verify source PORTS		Disables IP source guard.

To enable IP source guard with a source IP address and MAC address filtering on a port, use the following command.

Command		Mode	Description
ip dhcp verify source port-			Enables IP source guard with a source IP address and
security PORTS		Global	MAC address filtering on a port.
no ip dhcp verify source	port-		Disables IP source guard.
security PORTS

!	You cannot configure IP source guard with the ip dhcp verify source and ip dhcp verify
	source port-security commands together.

8.8.8.2Static IP Source Binding

The IP source binding table has bindings that are learned by DHCP snooping or manually specified with the ip dhcp verify source binding command. The switch uses the IP source binding table only when IP source guard is enabled.

To specify a static IP source binding entry, use the following command.

Command	Mode	Description
		Specifies a static IP source binding entry.
ip dhcp verify source binding		1-4094: VLAN ID
<1-4094>PORT A.B.C.D MAC-		PORT: port number
ADDR	Global	A.B.C.D: IP address
		MAC-ADDR: MAC address
no ip dhcp verify source binding		Deletes a specified static IP source binding.
{A.B.C.D all}

8.8.8.3Displaying IP Source Guard Configuration

To display IP source binding table, use the following command.

Command	Mode	Description
show ip dhcp verify source	Enable	Shows IP source binding entries.
binding	Global

262 A50010-Y3-C150-2-7619