how to lock a static ip in interface port in the switch EXOS 15.7?

  • 0
  • 1
  • Question
  • Updated 12 months ago
  • Answered
Photo of Fagner

Fagner

  • 90 Points 75 badge 2x thumb

Posted 12 months ago

  • 0
  • 1
Photo of Stephen Williams

Stephen Williams, Employee

  • 8,950 Points 5k badge 2x thumb
So you only want a single IP to source traffic on that port?  An ACL would do the trick. Or are you asking about a static ARP entry?
Photo of Fagner

Fagner

  • 90 Points 75 badge 2x thumb
I would like of a single static ip on the interface the switch.
The interface is configured in vlan XXX and the IP the host is configured local in the computer.
Photo of Ariyakudi Srinivas, Muthuraman

Ariyakudi Srinivas, Muthuraman, Employee

  • 994 Points 500 badge 2x thumb
Hi Fagner,

Are you asking if you can assign an IP address to a particular switch port? 
Something like a routed port? 
Photo of Fagner

Fagner

  • 90 Points 75 badge 2x thumb
No, I would like that the user no change the address ip the computer less to communicate the network administrator, understood. To this, I want lock the address IP in the interface the switch.
Photo of Jarek

Jarek

  • 2,398 Points 2k badge 2x thumb
Hi Fagner,

all depends what's your current  network configuration and what equipment you have.

Lets assume hosts are getting IP from DHCP server,
 then you can use for example  ip security features like:
Dhcp Snooping + Source IP Lockdown + ARP Validation, etc..

If you have statuc IP, you can do this with ACL , and so on...


--
Jarek
Photo of Stephen Williams

Stephen Williams, Employee

  • 8,950 Points 5k badge 2x thumb
The best solution is to use DHCP so you can use the dhcp snooping with IP source lock-down option Jarek recommended.  That would prevent static IP's from being used.