howto prevent someone use IPs for Servers on a LAN?

[mojganmasroor]

we are using a router 3640.

How i can close IP to a specific MAC Address on router that can't take that IP address?

using ip arp command didn't help. please learn me others.

thanks

[almetcousins]

First.

Are you using DHCP???

If you are (i hope you are) and you want to prevent dhcp clients to take some IP's (servers in this case) you should use the 'ip dhcp excluded-address' command in this way:

ip dhcp excluded-address "first ip lastip"

http://www.cisco.com/en/US/customer/products/sw/iosswrel/ps1831/products_configuration_guide_chapter09186a00800ca6b5.html#xtocid4

You cannot create manual arp bindings since arp is a pure dynamic service

[michel.mueller]

arp 1.2.3.4 0000.1111.2222 arpa will set a static arp entry on the router.

There was a bug in older IOS releases which allowed gratious arp to override the static arp entries (something before 12.0(7)T ).

What IOS release are you running ?

The static arp entry will not help for clients in the same vlan as the server trying to access the local server, as the client could get the arp response from the misconfigured client. Put the servers in their own VLAN. If the performance of the 3640 is not enough use a L3 or MLS capable switch.

Regards Michel