o <VLAN-ID> -- VLAN ID number to bind with the specied IP and MAC
address on the specied port in the DHCP snooping
binding database.
o <MAC-ADDR> -- MAC address to bind with the specied IP address and
VLAN on the specied port.
o <IP-ADDR> -- IP address to bind with the specied MAC address and
VLAN on the specied port.
o [ethernet] <PORT-NUM> -- Port number on which the IP-to-MAC and VLAN
binding is congured in.
Next Available Options:
■ vlan -- (VLAN-ID) (p. 312)
■ trap -- Set traps for dynamic ip lockdown(p. 311)
source-lockdown
■ [no] ip source-lockdown
Usage: [no] ip source-lockdown [ethernet] <port-list>
Description: Enable/disable IP source lockdown in global conguration mode.
Using the port-list option it can be congured on per-port basis.
Next Available Option:
■ portlist -- Specify the ports on which ip source-lockdown need to be implemented. ([ethernet]
PORT-LIST) (p. 305)
source-route
■ [no] ip source-route
Usage: [no] ip source-route
Description: Enable/disable forwarding of source routed packets.
ssh
■ [no] ip ssh
Usage: ip ssh letransfer
port <<1-65535>|default>
public-key <operator|manager> KEYSTRING
ip-version <4|6|4or6>
timeout <5-120>
cipher CIPHER
mac MAC
no ip ssh [letransfer]
cipher CIPHER
mac MAC
Description: Enable/disable SSH server on the device or set various SSH
server parameters.
Parameters:
o 'letransfer' - Enable/disable secure le transfer
capability. (SCP and SFTP) Secure le transfer will not
309© 2009 Hewlett-Packard Development Company, L.P.
ipCommand Line Interface Reference Guide
