Configuring A Static Ipv4 Source Guard Entry - HP 6125G Configuration Manual

Step
1. Enter system view.
2. Enter interface view
3. Configure IPv4 source guard
on the port.
NOTE:
Although dynamic IPv4 source guard entries are generated based on DHCP entries, the number of
dynamic IPv4 source guard entries is not necessarily the same as that of the DHCP entries.

Configuring a static IPv4 source guard entry

Static IPv4 binding entries take effect only on the ports configured with the IPv4 source guard function
(see "Configuring IPv4 source guard on a
Follow these guidelines to configure port-based static IPv4 source guard entries:
You cannot repeatedly configure the same static binding entry on one port, but you can configure
•
the same static entry on different ports.
• IP source guard does not use the VLAN information (if specified) in static IPv4 binding entries to
filter packets.
When the ARP detection function is configured, be sure to specify the VLAN where ARP detection
•
is configured in static IPv4 binding entries. Otherwise, ARP packets are discarded because they
cannot match any static IPv4 binding entry.
If a static binding entry to be added denotes the same binding as an existing dynamic binding entry,
•
the new static binding entry overwrites the dynamic binding entry.
To configure a static IPv4 binding entry on a port:
Step
1. Enter system view.
2. Enter Layer 2 interface view
3. Configure a static IPv4 source
guard entry on the port.
Command
system-view
interface interface-type
interface-number
ip verify source { ip-address |
ip-address mac-address |
mac-address }
port").
Command
system-view
interface interface-type
interface-number
ip source binding { ip-address
ip-address | ip-address ip-address
mac-address mac-address |
mac-address mac-address } [ vlan
vlan-id ]
227
Remarks
N/A
The term "interface" collectively
refers to the following types of
ports and interfaces: Layer 2
Ethernet ports and VLAN
interfaces.
Not configured by default.
Remarks
N/A
N/A
By default, no static IPv4 binding
entry is configured on a port.