R0106-HP MSR Router Series Security Command Reference(V7)

517
vlan vlan-id: Specifies a VLAN ID for the static binding entry. The value range is 1 to 4094.
Usage guidelines
IP source guard can use static IPv4 source guard binding entries on an interface to implement the
following functions:
• Filter incoming IPv4 packets on the interface.
• Check user validity by cooperating with the ARP detection feature.
The maximum number of static IPv4 source guard binding entries on a Layer 2 interface varies by
hardware:
MSR routers installed with the Layer 2 switching module HMIM-24GSW/24GSWP or HMIM-8GSW: 384
Examples
# Bind IP address 192.168.0.1 and MAC address 0001-0001-0001 to form a static IPv4 source guard
binding entry on GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] ip source binding ip-address 192.168.0.1 mac-address
0001-0001-0001
Related commands
display ip source binding
ip verify source
Use ip verify source to enable the IPv4 source guard function.
Use undo ip verify source to restore the default.
Syntax
ip verify source { ip-address | ip-address mac-address | mac-address }
undo ip verify source
Default
The IPv4 source guard function is disabled on an interface.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Parameters
ip-address: Filters incoming packets by source IPv4 addresses.
ip-address mac-address: Filters incoming packets by source IPv4 addresses and source MAC addresses.
mac-address: Filters incoming packets by source MAC addresses.
Usage guidelines
This command enables both static and dynamic IPv4 source guard on the interface.