Binding MAC address with IP address

[lili Vachon]

Dear all.

In our environment we have all the servers and computers assigned with Static IPs. But the problem is users are assigning IPs by themselve without our permission. This is causing us lots of head ache.  So what we are thinking is to Bind Mac address with IP address. Is that possible? If we bind IP address with mac address, will users not be able to use specific IP as its mismatching mac address? Or its impossible. Waiting for your response.

[julijime]

Hi Lili,

DHCP Snooping and DAI (Dynamic ARP Inspection) might be a good option for your environment. With this solution your users would need to wait and receive an IP address from the DHCP server and will not be able to use an static IP address if it's not permitted.

DHCP snooping will automatically create an IP-to-MAC binding during the DHCP DORA process and DAI will block those hosts whose binding is not in the database.

http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/configuration/guide/book/dynarp.html

HTH

Julio