Page 356 / 757 Scroll up to view Page 351 - 355
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
352
DGS-3627:admin# config address_binding ip_mac ports 1 state enable
Command: config address_binding ip_mac ports 1 state enable
Success.
DGS-3627:admin#
create address_binding ip_mac
Purpose
Used to create an IMPB entry.
Syntax
create address_binding ip_mac [ipaddress < ipaddr > | ipv6address <ipv6addr>]
mac_address < macaddr > { ports [ portlist | all]}
Description
Use this command to create an IMPB entry.
One MAC address can map to multiple IP address
Parameters
ipaddr
- Specify the IP address used for the IMPB entry.
ipv6addr
- Specify the IPv6 address used for the IMPB entry.
macaddr
- Specify the MAC address used for the IMPB entry.
ports
- Specify the portlist the entry will apply to. If not ports are specified, the settings will be
applied to all ports.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To create an IMPB entry:
DGS-3627:admin# create address_binding ip_mac ipaddress 10.1.1.1 mac_address 00-00-00-00-
00-11
Command: create address_binding ip_mac ipaddress 10.1.1.1 mac_address 00-00-00-00-00-11
Success.
DGS-3627:admin#
To create a static IPv6 IMPB entry:
DGS-3627:admin# create address_binding ip_mac ipv6address fe80::240:5ff:fe00:28
mac_address 00-00-00-00-00-11
Command: create address_binding ip_mac ipv6address fe80::240:5ff:fe00:28 mac_address 00-
00-00-00-00-11
Success.
DGS-3627:admin#
delete address_binding
Purpose
Used to delete an IMPB entry or blocked entry.
Syntax
delete address_binding [ip_mac [[ipaddress < ipaddr > | ipv6address <ipv6addr>]
mac_address < macaddr > | all] | blocked [ all | vlan_name < vlan_name > mac_address
< macaddr >]]
Description
Use this command to delete an IMPB entry or a blocked entry.
If the ACL mode is enabled, the switch will delete the related ACL access entries
automatically.
Page 357 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
353
delete address_binding
Parameters
ip_mac
- Specify the user created IMPB database.
blocked
- Specify the address database that the system has automatically learned and
blocked.
ipaddr
- Specify the learned IP address of the entry in the database.
ipv6addr
- Specify the learned IPv6 address of the entry in the database.
macaddr
- Specify the MAC address of the entry or the blocked MAC address.
vlan_name
- Specify the name of the VLAN to which the blocked MAC address belongs.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To delete an IMPB entry:
DGS-3627:admin# delete address_binding ip_mac ipaddress 10.1.1.1 mac_address 00-00-00-00-
00-11
Command: delete address_binding ip_mac ipaddress 10.1.1.1 mac_address 00-00-00-00-00-11
Success.
DGS-3627:admin#
To delete a static ipv6 IMPB entry:
DGS-3627:admin# delete address_binding ip_mac ipv6address fe80::240:5ff:fe00:28
mac_address 00-00-00-00-00-11
Command: delete address_binding ip_mac ipv6address fe80::240:5ff:fe00:28 mac_address 00-
00-00-00-00-11
Success.
DGS-3627:admin#
To delete a blocked address:
DGS-3627:admin# delete address_binding blocked vlan_name v31 mac_address 00-00-00-00-00-
11
Command: delete address_binding blocked vlan_name v31 mac_address 00-00-00-00-00-11
Success.
DGS-3627:admin#
config address_binding ip_mac
Purpose
Used to update an IMPB entry.
Syntax
config address_binding ip_mac [ipaddress < ipaddr > | ipv6address <ipv6addr>]
mac_address < macaddr > {ports [ portlist | all]}
Description
This command is used to update an IMPB entry.
Page 358 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
354
config address_binding ip_mac
Parameters
ipaddr
- Specify the IP address of the entry being updated.
ipv6addr
- Specify the IPv6 address of the entry being updated.
macaddr
- Specify the MAC address of the entry being updated
ports
- Specify which ports are used for the IMPB entry being updated. If not specified, then it
is applied to all ports.
Restrictions
Only Administrator and Operator-level users can issue this command.
Example usage:
To configure an IMPB entry:
DGS-3627:admin# config address_binding ip_mac ipaddress 10.1.1.1 mac_address 00-00-00-00-
00-11
Command: config address_binding ip_mac ipaddress 10.1.1.1 mac_address 00-00-00-00-00-11
Success.
DGS-3627:admin#
To configure a static IPv6 IMPB entry:
DGS-3627:admin#config address_binding ip_mac ipv6address fe80::240:5ff:fe00:28
mac_address 00-00-00-00-00-11
Command: config address_binding ip_mac ipv6address fe80::240:5ff:fe00:28 mac_address 00-
00-00-00-00-11
Success.
DGS-3627:admin#
show address_binding
Purpose
Used to display the IMPB entries, blocked MAC entries and port status.
Syntax
show address_binding {[ip_mac [all | [ipaddress <ipaddr> | ipv6address <ipv6addr>]
mac_address <macaddr>] | blocked [all | vlan_name <vlan_name> mac_address
<macaddr>] | ports {<portlist>}]}
Description
This command is used to show the IMPB information.
Parameters
ip_mac
- Specify the user created IMPB database.
blocked
- Specify the addresses in the database that the system has auto learned and
blocked.
ipaddr
- Specify the learned IP address of the entry in the database.
ipv6addr
- Specify the learned IPv6 address of the entry in the database.
macaddr
- Specify the MAC address of the entry or the blocked MAC address.
vlan_name
- Specify the name of the VLAN to which the blocked MAC address belongs.
ports
- Specify the ports for which the information is displayed. If not specified, all ports are
displayed.
Restrictions
None.
Example usage:
To show the IMPB global configuration:
Page 359 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
355
DGS-3627:admin# show address_binding
Command: show address_binding
Trap/Log
: Enabled
DHCP Snoop(IPv4) : Disabled
DHCP Snoop(IPv6) : Enabled
ND Snoop
: Disabled
DGS-3627:admin#
To show the IMPB ports:
DGS-3627:admin#show address_binding ports
Command: show address_binding ports
Port
IPv4
IPv6
Mode
Zero IP
DHCP Packet
Stop Learning
State
State
Threshold/Mode
--------
--------
--------
----
---------
-----------
--------------
1
Loose
Enabled
ARP
Allow
Forward
100/Stop
2
Strict
Enabled
ARP
Not Allow
Not Forward
200/Normal
3
Disabled
Enabled
ACL
Not Allow
Not Forward
200/Normal
4
Strict
Disabled
ARP
Not Allow
Not Forward
200/Normal
5
Disabled
Disabled
ACL
Not Allow
Not Forward
200/Normal
6
Strict
Disabled
ARP
Not Allow
Not Forward
200/Normal
7
Disabled
Disabled
ACL
Not Allow
Not Forward
200/Normal
8
Strict
Disabled
ARP
Not Allow
Not Forward
200/Normal
9
Disabled
Disabled
ACL
Not Allow
Not Forward
200/Normal
10
Strict
Disabled
ARP
Not Allow
Not Forward
200/Normal
11
Disabled
Disabled
ACL
Not Allow
Not Forward
200/Normal
12
Strict
Disabled
ARP
Not Allow
Not Forward
200/Normal
DGS-3627:admin#
To show IMPB entries:
DGS-3627:admin# show address_binding ip_mac all
Command: show address_binding ip_mac all
M(Mode) – D:DHCP,N:ND,S:Static
ACL - A:Active I:Inactive
IP Address
MAC Address
M
ST Ports
--------------------------------------- -----------------
-- -- -------------
10.1.1.1
00-00-00-00-00-11
S
I 1,3,5,7,8
10.1.1.2
00-00-00-00-00-12
S
A 1
10.1.1.10
00-00-00-00-00-aa
D
A 1
2001:1111:2222:3333:4444:5555:6666:7777
00-00-00-00-00-02
D
I 2
2001:1111::1
00-00-00-00-00-03
N
I 5
Total Entries : 3
DGS-3627:admin#
To show the IMPB entries that are blocked:
Page 360 / 757
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
356
DGS-3627:admin# show address_binding blocked
Command: show address_binding blocked
VID
VLAN Name
MAC Address
Port
---- --------------------------------
----------
1
default
00-01-02-03-29-38
7
1
default
00-0C-6E-5C-67-F4
7
1
default
00-0C-F8-20-90-01
7
1
default
00-0E-35-C7-FA-3F
7
1
default
00-0E-A6-8F-72-EA
7
1
default
00-0E-A6-C3-34-BE
7
1
default
00-11-2F-6D-F3-AC
7
1
default
00-50-8D-36-89-48
7
1
default
00-50-BA-00-05-9E
7
1
default
00-50-BA-10-D8-F6
7
1
default
00-50-BA-38-7D-E0
7
1
default
00-50-BA-51-31-62
7
1
default
00-50-BA-DA-01-58
7
1
default
00-A0-C9-01-01-23
7
1
default
00-E0-18-D4-63-1C
7
Total entries : 15
DGS-3627:admin#
enable address_binding dhcp_snoop
Purpose
Used to enable DHCP snooping mode.
Syntax
enable address_binding dhcp_snoop {[ipv6 | all]}
Description
By default, DHCP snooping is disabled.
If a user enables DHCP sSnooping mode, all ports which have IMPB disabled will become
server ports. (The switch will learn the IP addresses through server ports (by using DHCP
Offer and DHCP ACK packets).
Note that the DHCP discover packet cannot be passed thru the user ports if the allow_zeroip
function is disabled on the port.
The auto-learned IMPB entry will be mapped to a specific source port based on the MAC
address learning function. This entry will be created as an ACL-mode binding entry for this
specific port. Each entry is associated with a lease time. When the lease time has expires,
the expired entry will be removed from the port. The auto-learned binding entry can be
moved from one port to another port if the DHCP snooping function has learned that the MAC
address has moved to a different port.
If a situation occurs where a binding entry learned by DHCP snooping conflicts with a
statically configured entry. The binding relation has conflicted. For example, if IP A is binded
to MAC X with a static configuration and suppose that the binding entry learned by DHCP
snooping is that IP A is bound to MAC Y, and then it is conflict. When the DHCP snooping
learned entry binds with the static configured entry, and the DHCP snooping learned entry
will not be created.
In a situation where the same IMPB pair has been statically configured, the auto-learned
entry will not be created. In a situation where the learned information is consistent with the
statically configured entry the auto-learned entry will not be created. In a situation where the
entry is statically configured in ARP mode the auto learned entry will not be created. In a
situation where the entry is statically configured on one port and the entry is auto-learned on
another port, the auto-learned entry will not be created.
Parameters
ipv6
- Enable DHCP snooping for IPv6.
all
- Enable IPv4 and IPv6 DHCP snooping.
If no parameter is specified, IPv4 snooping is enabled.

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top