How to prevent the users with static IP's to connect the Network

[Mohamed Lotfy]

Dear all,

Please is it possible to prevent the users with static IP's to connect the Network?

We use Cisco sw 4500 series as an access and distribution switches.

Is there any features on the switches that fit my request? Ex: IP Source guard

Thanks

Moahmed Lotfy

[mastrboy_]

If i remember correctly you need to configure IP DHCP SNOOPING and IP SOURCE GUARD.

You can use this tool too figure out if your hardware/ios version supports this:

http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp

[Mohamed Lotfy]

Dear Mastrboy,

I think the IP DHCP SNOOPING and IP SOURCE GUARD are using for binding the IP address , MAC Address & Vlan with the spacific port.

So i think it will not be useful, do you have any other ideas?

[cadet alain]

Hi,

The IP source guard feature along with DHCP snooping will indeed prevent static IPs from accessing the network.

So don't forget to use static bindings for those servers or switches which have static IPs otherwise you won't be able to access them .

Regards.

Alain