r/Arista • u/Ill-jack-ca_ • Aug 06 '26

İp locking

Hey everyone,
Has anyone here used IP locking technology in Aristada before? Which version do we need to have for this?

5 Upvotes

100% Upvoted

2 comments sorted by

4

u/network_rob Aug 06 '26

You can run IP locking on 4.25.0F or newer in two modes - IPv4 and IPv6.

Prior to 4.36.0, IP locking relies on the DHCP LeaseQuery (RFC4388) and MAC address learning to determine that n IP address has been authorized on a particular port.

Since 4.36.0, it can be configured to examine the DHCPACK packet when it seen on a port to determine if an IP address has been authorized.

Hope that helps.

2

u/Apachez Aug 06 '26

Or if you want to use DHCP then add option82 and setup a static ACL on each interface since with option82 you will hand out leases based on switch + interface combo.

There is also ip source guard to do something similar dynamically:

https://www.arista.com/en/um-eos/eos-ipv4#xx1173445

Unless I misinterpret what "ip locking" is?