IP to MAC/Port Binding

[EtherNation_Use]

Create Date: Jan 2 2013 11:29AM

I have configured MAC binding on our Summit x450e-48p Switches using create fdbentry command. Now i need to ensure that the users use only the IP Addresses assigned to them(IP-MAC binding?). How can this be done on the x450e-48p switch? https://

Thanks in advance https:// (from vikram_nair)

[EtherNation_Use]

Create Date: Jan 3 2013 9:44AM

what i have done is make a policy in the switch say (s1). this policy has two rule one the blocking the all ip of the range and another is allowing a particular ip. so policy is :-

Policy: s1
entry drop1 {
if match all {
source-address 192.xxx.xxx.183/32 ;
}
then {
permit ;
}
}
entry drop2 {
if match all {
source-address 192.xxx.xxx.128/25 ;
}
then {
deny ;
}
}

now , i confiqured access list like this

configure access-list s1 port 9 ;

so if PC conneted to port nine has ip 192.xxx.xxx.183 than only he is able to access the network otherwise packets will get dropped.

this is exactly what i want to acheive. now, my concern is that if there is any other better way of doing the same thing and also i have to do it for all the port on switch so this method is very slow...

can anyone help ?

thanks in advance (from vikram_nair)