Configuring Dynamic Binding Function; Displaying Ip Source Guard; Ip Source Guard Configuration Examples - 3Com Switch 4800G 24-Port Configuration Manual

178 C 21: IP S
HAPTER OURCE
Configuring Dynamic
Binding Function
Displaying IP Source
Guard
IP Source Guard
Configuration
Examples
Static Binding Entry
Configuration Example
G C
UARD ONFIGURATION
To do...
Configure a static binding
entry
n
The system does not support repeatedly configuring a binding entry to one
■
port. A binding entry can be configured to multiple ports.
In a valid binding entry, the MAC address cannot be all 0s, all Fs (a broadcast
■
address), or a multicast address, and the IP address can only be a Class A, Class
B, or Class C address and can be neither 127.x.x.x nor 0.0.0.0.
After the dynamic binding function is enabled on a port, IP source guard will
receive and process corresponding DHCP Snooping entries, which contain such
information as MAC address, IP address, VLAN tag, port information or entry type.
It adds the obtained information to the dynamic binding entries to enable the port
to filter packets according to the binding entries.
Follow these steps to configure dynamic binding function:
To do...
Enter system view
Enter interface view
Configure dynamic
binding function
To do...
Display information
about static binding
entries
Display information
about dynamic binding
entries
Network requirements
As shown in Figure 47, switches A and B and Hosts A, B and C are on an Ethernet.
Host A and Host B are connected to ports GigabitEthernet1/0/1 and
GigabitEthernet1/0/2 of Switch B respectively, Host C is connected to port
GigabitEthernet1/0/2 of Switch A, while Switch B is connected to port
GigabitEthernet1/0/1 of Switch A.
Detailed requirements are as follows:
Use the command...
user-bind { ip-address ip-address |
ip-address ip-address mac-address
mac-address | mac-address
mac-address }
Use the command...
system-view
interface interface-type interface-number
ip check source { ip-address | ip-address
mac-address | mac-address }
Use the command...
display user-bind [ interface interface-type
interface-number | ip-address ip-address |
mac-address mac-address ]
display ip check source [ interface
interface-type interface-number | ip-address
ip-address | mac-address mac-address ]
Remarks
Required
No static binding
entry exists by
default.
Remarks
-
-
Required
Not configured by default
Remarks
Available in any
view
Available in any
view