Address bindings allow a range of IP and MAC addresses and VLANs to be bound to switch.

About this task

In SpoofGuard, address bindings provide the allowed MAC/VLAN/IP whitelist. With the corresponding SpoofGuard enabled, SpoofGuard ensures that the specified address bindings are enforced in the data path.

Procedure

  1. In NSX Manager, navigate to Switching > Switches.
  2. Click the logical switch to which you want apply address binding.

    In the right-hand window the switch summary appears.

  3. Under the Summary tab, expand Address Bindings.
  4. Click Add.

    The Add Address Binding dialogue box appears.

  5. Enter the MAC addresses and the IP range of the switch (and VLAN if applicable) in the switch address binding.

    After the IP range/subnet is specified, the data path will apply bindings across all ports on the switch.

  6. Click Save.

What to do next

Now you'll Configure a SpoofGuard Switching Profileand add the address bindings to the SpoofGuard whitelist.