Enabling 802.1X user IP freezing
About 802.1X user IP freezing
This feature works with the IP source guard feature. 802.1X-based IP source guard requires that 802.1X clients support sending user IP addresses to the access device. The device uses information such as user MAC addresses and IP addresses obtained through 802.1X to generate IPSG bindings to filter out IPv4 packets from unauthenticated 802.1X users. For information about IP source guard, see "Configuring IP source guard."
This feature prevents any authenticated 802.1X users on a port from changing their IP addresses. After you enable this feature, the port does not update the IP addresses in dynamic IPSG bindings for 802.1X users. If an 802.1X user uses an IP address different from the IP address in its IPSG binding entry, the port denies the user access.
Procedure
Enter system view.
system-view
Enter interface view.
interface interface-type interface-number
Enable 802.1X user IP freezing.
dot1x user-ip freeze
By default, 802.1X user IP freezing is disabled.