Header Only - DO NOT REMOVE - Extreme Networks
Question

IP and MAC binding

  • 18 February 2020
  • 3 replies
  • 205 views

My configuration is

configure iparp 10.10.10.1 vr VR-Default <MAC add>.

 

My requirement is 

If I change the IP address of that particular device. It should not work means it should not PING.

 

How do I do that? I only want to allow particular IP from particular MAC address.


3 replies

Hello do you know the ip address you want to not allow to ping? You are going to have to go into the Dhcp server and exclude it.

 

https://extremeportal.force.com/ExtrArticleDetail?n=000005863&q=exclude%20ip%20address

My requirement is, I only want to allow only one IP address for one MAC. If I change IP for that particular MAC it should not PING.

You might be able to use access lists for this. The logic

 

if ethernet-source-address 00:01:02:03:04:00 and source-address 1.1.1.1 then permit else deny. Play with policies.

What are you hoping to achieve as there may be a better way to look at it. Would it be enough to pin an IP address to a specific MAC within DHCP, or to hard set the host and exclude the address from DHCP scope?

Reply