HP 2530 User Manual

Syntax:
[no] ip source-binding <mac-address> vlan <vlan-id> <ip-address> interface
<port-number>
TaskParameter
Specifies a MAC address to bind with a VLAN and IP address on the
specified port in the DHCP binding database.
mac-address
Specifies a VLAN ID number to bind with the specified MAC and IP
addresses on the specified port in the DHCP binding database.
vlan <vlan-id>
Specifies an IP address to bind with a VLAN and MAC address on the
specified port in the DHCP binding database.
ip-address
Specifies the port number on which the IP-to- MAC address and VLAN
binding is configured in the DHCP binding database.
interface
<port-number>
For example:
HP Switch(config)# ip source-binding 0030c1-7f49c0
vlan 100 10.10.20.1 interface 4
NOTE: The ip source-binding command is the same command used by the Dynamic IP
Lockdown feature to configure static bindings. The Dynamic ARP Protection and Dynamic IP
Lockdown features share a common list of source IP-to-MAC bindings.
Configuring additional validation checks on ARP packets
Dynamic ARP protection can be configured to perform additional validation checks on ARP packets.
By default, no additional checks are performed. To configure additional validation checks, enter
the arp-protect validate command at the global configuration level.
Syntax:
[no] arp-protect validate < [src-mac | dest-mac | ip ] >
DetailTaskParameter
n/a(Optional) Drops any ARP request or
response packet in which the source
src-mac
MAC address in the Ethernet header
does not match the sender MAC
address in the body of the ARP packet.
n/a(Optional) Drops any unicast ARP
response packet in which the
dest-mac
destination MAC address in the
Ethernet header does not match the
target MAC address in the body of the
ARP packet.
Invalid IP addresses include: 0.0.0.0,
255.255.255.255, all IP multicast
addresses, and all Class E IP addresses.
(Optional) Drops any ARP packet in
which the sender IP address is invalid.
Drops any ARP response packet in
which the target IP address is invalid.
ip
You can configure one or more of the validation checks. In the following example, the
arp-protect validate command configures validation checks for source MAC address and
destination AMC address:
HP Switch(config)# arp-protect validate src-mac dest-mac
18 Updates for the HP Switch Software Access Security Guide

HP 2530 Specifications

General

Brand	HP
Model	2530
Category	Switch
Language	English