H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – IP Source Guard
H3C S7500E Series Ethernet Switches Chapter 1 IP Source Guard Configuration
1-2
To do… Use the command… Remarks
Enter system view
system-view
—
Enter interface view
interface interface-type
interface-number
—
Configure a static
binding entry
user-bind { ip-address ip-address |
ip-address ip-address
mac-address mac-address |
mac-address mac-address }
Required
No static binding
entry exists by
default.
 Note:
z The system does not support repeatedly configuring a binding entry to one port. A
binding entry can be configured to multiple ports.
z In a valid binding entry, the MAC address cannot be all 0s, all Fs (a broadcast
address), or a multicast address, and the IP address can only be a Class A, Class B,
or Class C address and can be neither 127.x.x.x nor 0.0.0.0.
1.3 Configuring Dynamic Binding Function
After the dynamic binding function is enabled on a port, IP source guard will receive and
process corresponding DHCP Snooping entries, which contain such information as
MAC address, IP address, VLAN tag, port information or entry type. It adds the
obtained information to the dynamic binding entries to enable the port to filter packets
according to the binding entries.
Follow these steps to configure dynamic binding function:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter interface view
interface interface-type
interface-number
—
Configure dynamic
binding function
ip check source
{ ip-address | ip-address
mac-address |
mac-address }
Required
Not configured by default