H3C S7500E Series Ethernet Switches Operation Manual

Operation Manual – IP Source Guard
H3C S7500E Series Ethernet Switches Chapter 1 IP Source Guard Configuration
1-6
 Note:
For detailed configuration of DHCP Server, refer to DHCP Configuration in this manual.
II. Network diagram
Figure 1-2 Network diagram for configuring dynamic binding
III. Configuration procedure
1) Configure Switch A
# Configure dynamic binding on port Ethernet 2/0/1.
<SwitchA> system-view
[SwitchA] interface ethernet2/0/1
[SwitchA-Ethernet2/0/1] ip check source ip-address mac-address
[SwitchA-Ethernet2/0/1] quit
# Enable DHCP snooping on Switch A.
[SwitchA] dhcp-snooping
# Configure port Ethernet 2/0/2 connected to the DHCP server as a trusted port.
[SwitchA] interface ethernet2/0/2
[SwitchA-Ethernet2/0/2] dhcp-snooping trust
[SwitchA-Ethernet2/0/2] quit
2) Verify the configuration
# Dynamic binding is configured successfully on port Ethernet 2/0/1.
[SwitchA] interface ethernet2/0/1
[SwitchA-Ethernet2/0/1] display this
#
interface Ethernet2/0/1
ip check source ip-address mac-address
#
return
# Display the dynamic binding entries that port Ethernet 2/0/1 has obtained from DHCP
Snooping.
<SwitchA> display ip check source
The following user address bindings have been configured:
MAC IP Vlan Port Status