R2511-HP MSR Router Series Security Command Reference(V5)

477
Hardware Command compatibility Supported keywords
Maximum static
binding entries
Yes on MSR30-11E Layer 2 fixed
Ethernet ports.
• ip-address
•
mac-address
• vlan
192
Yes on MSR30-11F Layer 2 fixed
Ethernet ports.
• ip-address
• mac-address
384
MSR50
Yes on MSR50 routers installed with
FIC-FSW or DFIC-FSW modules.
• ip-address
• mac-address
•
vlan
8
MSR1000 Yes on Layer 2 fixed Ethernet ports. mac-address 200
Examples
# Configure a static IPv4 IP-MAC binding entry on port Ethernet 1/1.
<Sysname> system-view
[Sysname] interface ethernet 1/1
[Sysname-Ethernet1/1] ip source binding ip-address 192.168.0.1 mac-address 0001-0001-0001
Related commands
display ip source binding static
ip verify source
Use ip verify source to enable the IPv4 source guard function on a port and specify the elements to be
included in the port's dynamic binding entries.
Use undo ip verify source to restore the default.
Syntax
ip verify source { ip-address | ip-address mac-address | mac-address }
undo ip verify source
Default
The IPv4 source guard function is disabled on a port.
Views
Ethernet interface view, port group view
Default command level
2: System level
Parameters
ip-address: Binds source IPv4 addresses to the port.
ip-address mac-address: Binds source IPv4 addresses and MAC addresses to the port.
mac-address: Binds source MAC addresses to the port.
Usage guidelines
You cannot configure IPv4 source guard on a port that is in a link aggregation group.