Chapter 26 IP Source Guard

26.2 IP Source Guard

Use this screen to look at the current bindings for DHCP snooping and ARP inspection. Bindings are used by DHCP snooping and ARP inspection to distinguish between authorized and unauthorized packets in the network. The Switch learns the bindings by snooping DHCP packets (dynamic bindings) and from information provided manually by administrators (static bindings). To open this screen, click Advanced Application > IP Source Guard.

Figure 117 IP Source Guard

The following table describes the labels in this screen.

Table 81 IP Source Guard

LABEL

DESCRIPTION

Index

This field displays a sequential number for each binding.

 

 

MAC Address

This field displays the source MAC address in the binding.

 

 

IP Address

This field displays the IP address assigned to the MAC address in the binding.

 

 

Lease

This field displays how many days, hours, minutes, and seconds the binding is valid; for

 

example, 2d3h4m5s means the binding is still valid for 2 days, 3 hours, 4 minutes and 5

 

seconds. This field displays infinity if the binding is always valid (for example, a static

 

binding).

 

 

Type

This field displays how the Switch learned the binding.

 

static: This binding was learned from information provided manually by an administrator.

 

dhcp-snooping: This binding was learned by snooping DHCP packets.

 

 

VID

This field displays the source VLAN ID in the binding.

 

 

Port

This field displays the port number in the binding. If this field is blank, the binding applies to

 

all ports.

 

 

26.3 IP Source Guard Static Binding

Use this screen to manage static bindings for DHCP snooping and ARP inspection. Static bindings are uniquely identified by the MAC address and VLAN ID. Each MAC address and VLAN ID can only be in one static binding. If you try to create a static binding with the same MAC address and VLAN

 

219

ES3500 Series User’s Guide