Kings, Source guard uses the dhcp snooping binding database so it is required.
See here: http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_25_se/configuration/guide/swdhcp82.html#wp1154649 Regards, Brandon Carroll - CCIE #23837 Senior Technical Instructor - IPexpert Mailto: [email protected] Telephone: +1.810.326.1444 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com On Mar 16, 2010, at 11:47 PM, Kingsley Charles wrote: > Hi all > > Is "ip dhcp snooping" required to be configured for ip source guard? I > configured static source binding and thought that > dhcp snooping doesn't need to be enabled. But without snooping, ip source > guard seems to be inactive. Only after configuring > snooping, the source guard was active. > > > > sw#sh ip source binding > MacAddress IpAddress Lease(sec) Type VLAN > Interface > ------------------ --------------- ---------- ------------- ---- > ---------- > ---------- > 00:13:80:84:AC:41 10.20.30.41 infinite static 3 > FastEthern > et1/0/1 > Total number of bindings: 1 > > > sw#sh ip verify source > Interface Filter-type Filter-mode IP-address Mac-address Vlan > --------- ----------- ----------- --------------- ----------------- > ------- > --- > Fa1/0/1 ip-mac inactive-no-snooping-vlan > > > > > With regards > Kings > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
