R3303-HP HSR6800 Routers Security Command Reference

477
ip source binding
Use ip source binding to configure a static IPv4 source guard entry on a port.
Use undo ip source binding to delete a static IPv4 source guard entry from a port.
Syntax
ip source binding { ip-address ip-address | ip-address ip-address mac-address mac-address |
mac-address mac-address } [ vlan vlan-id ]
undo ip source binding { ip-address ip-address | ip-address ip-address mac-address mac-address |
mac-address mac-address } [ vlan vlan-id ]
Default
No static IPv4 binding entry exists on a port.
Views
Layer 2 Ethernet interface view
Default command level
2: System level
Parameters
ip-address ip-address: Specifies the IPv4 address for the static binding entry. The IPv4 address cannot be
127.x.x.x, 0.0.0.0, or a multicast IP address.
mac-address mac-address: Specifies the MAC address for the static binding in the format H-H-H. The
MAC address cannot be all 0s, all Fs (a broadcast address), or a multicast address.
vlan vlan-id: Specifies the VLAN ID for the static binding, in the range of 1 to 4094.
Usage guidelines
You cannot configure the same static binding entry repeatedly on one port, but you can configure the
same static entry on different ports.
You cannot configure a static binding entry on a link aggregation member port.
Examples
# Configure a static IPv4 source guard entry (IP+MAC binding) on port GigabitEthernet 3/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 3/0/1
[Sysname-GigabitEthernet3/0/1 ip source binding ip-address 192.168.0.1 mac-address
0001-0001-0001
Related commands
display ip source binding static
ip verify source
Use ip verify source to enable the IPv4 source guard function on a port and specify the elements to be
included in the port's dynamic binding entries.
Use undo ip verify source to restore the default.