Configuring A Static Ipv4 Source Guard Binding Entry - HP 3600 v2 Series Configuration Manual

Step
2. Enable 802.1X globally.
3. Enter interface view.
4. Enable 802.1X on the
interface.
5. Enable the 802.1X IP freezing
function.
6. Enable the interface to
generate 802.1X-based
dynamic IPv4 source guard
binding entries.
7. Configure IPv4 source guard
on the interface.
NOTE:
Although dynamic IPv4 source guard binding entries are generated based on DHCP entries, the number
of dynamic IPv4 source guard binding entries is not necessarily the same as that of the DHCP entries.

Configuring a static IPv4 source guard binding entry

Static IPv4 binding entries take effect on an interface only when the interface is configured with the IPv4
source guard feature (see
You can configure global static and interface-specific static IPv4 source guard binding entries. Global
static binding entries take effect on all interfaces configured with the IPv4 source guard feature.
Interface-specific static binding entries take priority over global static binding entries. An interface first
uses the static binding entries on the interface to match packets. If no match is found, the interface uses
the global binding entries.
Configuring a global static IPv4 source guard binding entry
Step
1. Enter system view.
Command
dot1x
interface interface-type
interface-number
dot1x
dot1x user-ip freeze
ip verify source dot1x
ip verify source
{ ip-address | ip-address
mac-address |
mac-address }
"Configuring IPv4 source guard on an
Command
system-view
357
Remarks
Optional.
By default, 802.1X is disabled globally.
The term "interface" collectively refers to
the following types of ports and interfaces:
Bridge mode (Layer 2) Ethernet ports,
VLAN interfaces, and port groups.
Optional.
By default, 802.1X is disabled on the
interface.
Optional.
By default, this function is disabled. A port
saves the IP addresses of 802.1X users and
updates the IP addresses if 802.1X users
change their IP addresses.
Optional.
By default, an interface does not generate
802.1X-based dynamic IPv4 source guard
binding entries.
Not configured by default.
interface").
Remarks
N/A