H3C S3100 Series Command Manual page 1091

Description
Use the ip source static import dot1x command to enable using IP-MAC bindings of authenticated
802.1x clients for ARP attack detection. The IP-MAC bindings of authenticated 802.1x clients are used
for ARP attack detection after IP-MAC static bindings and DHCP snooping entries are checked.
Use the undo ip source static import dot1x command to disable the function.
By default, this function is disabled.
Note that:
This command should be used in cooperation with the arp detection enable command.
Among S3100 series switches, only S3100-EI series switches support the two commands.
Examples
# Enable the switch to record IP-MAC bindings of authenticated 802.1x clients.
<sysname> system-view
[sysname] ip source static import dot1x
ip check dot1x enable
Syntax
ip check dot1x enable
undo ip check dot1x enable
View
Ethernet port view
Parameters
None
Description
Use the ip check dot1x enable command to enable IP filtering based on IP-MAC bindings of
authenticated 802.1x clients.
Use the undo ip check dot1x enable command to disable the function.
By default, IP filtering based on IP-MAC bindings of authenticated 802.1x clients is disabled.
Note that:
The ip check dot1x enable and the ip check source ip-address mac-address commands are
mutually exclusive.
Among S3100 series switches, only S3100-EI series switches support the two commands.
Examples
# Enable IP filtering based on IP-MAC bindings of authenticated 802.1x clients on Ethernet 1/0/2.
<sysname> system-view
[sysname] interface ethernet1/0/2
[sysname-Ethernet1/0/2] ip check dot1x enable
4