R2511-HP MSR Router Series Security Command Reference(V5)

475
Hardware Command com
p
atibilit
y
MSR20 No.
MSR30
Yes on the following models:
• MSR30 routers installed with MIM-FSW or DMIM-FSW modules.
• MSR30-11E Layer 2 fixed Ethernet ports.
• MSR30-11F Layer 2 fixed Ethernet ports.
MSR50 Yes on MSR50 routers installed with FIC-FSW or DFIC-FSW modules.
MSR1000 Yes on Layer 2 fixed Ethernet ports.
Examples
# Display all IPv4 source guard binding entries.
<Sysname> display ip source binding
Total entries found: 3
MAC Address IP Address VLAN Interface Type
040a-0000-4000 10.1.0.9 2 Eth1/1 Static
040a-0000-3000 10.1.0.8 2 Eth1/1 DHCP-SNP
040a-0000-2000 10.1.0.7 2 Eth1/1 DHCP-SNP
# Display all static IPv4 source guard binding entries.
<Sysname> display ip source binding static
Total entries found: 2
MAC Address IP Address VLAN Interface Type
040a-0000-0012 10.1.0.12 6 Eth1/3 Static
040a-0000-0013 10.1.0.12 6 Eth1/3 Static
Table 71 Command output
Field Descri
p
tion
Total entries found Total number of IPv4 source guard binding entries.
MAC Address
MAC address of the IPv4 source guard binding entry. If no MAC address
is bound in the entry, this field displays N/A.
IP Address
IP address of the IPv4 source guard binding entry. If no IP address is
bound in the entry, this field displays N/A.
VLAN
VLAN bound to the IPv4 source guard binding entry. If no VLAN
information exists in the entry, this field displays N/A.
Interface Interface of the IPv4 source guard binding entry.
Type
Type of the IPv4 source guard binding entry:
• Static—Static entry.
• DHCP-SNP—Entry generated based on a DHCP snooping entry. The
IP source guard function uses DHCP snooping entries to generate
dynamic binding entries.
Related commands
• ip verify source
• ip source binding