Huawei Quidway S2700 Series Configuration Manual page 139

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
# Enable the IP source guard function on Ethernet 0/0/2 connected to Host B.
[Quidway] interface ethernet 0/0/2
[Quidway-Ethernet0/0/2] ip source check user-bind enable
[Quidway-Ethernet0/0/2] quit
# Enable the alarm function for checking the received IP packets on Ethernet 0/0/2 connected
to Host B.
[Quidway-Ethernet0/0/2] ip source check user-bind alarm enable
[Quidway-Ethernet0/0/2] ip source check user-bind alarm threshold 200
[Quidway-Ethernet0/0/2] quit
Step 2 After user A goes online, the system allocates IP address 10.0.0.1/24 to the user and the user
adopts MAC address 1-1-1.
Step 3 Verify the configuration.
Run the display dhcp snooping user-bind all command on the Switch to view information
about the binding table.
<Quidway> display dhcp snooping user-bind all
DHCP static Bind-table:,Flags:O - outer vlan ,I - inner vlan ,P - map vlan,
IP Address
--------------------------------------------------------------------------------,
10.0.0.1
--------------------------------------------------------------------------------,
print count:
The preceding information indicates that Host A exists in the static binding table, whereas Host
B does not exist.
----End
Configuration Files
#
user-bind static ip-address 10.0.0.1 mac-address 0001-0001-0001 interface
Ethernet 0/0/1 vlan 10
#
interface Ethernet 0/0/1
ip source check user-bind enable
ip source check user-bind alarm enable
ip source check user-bind alarm threshold 200
#
interface Ethernet 0/0/2
ip source check user-bind enable
ip source check user-bind alarm enable
ip source check user-bind alarm threshold 200
#
return
Issue 01 (2011-07-15)
MAC Address
0001-0001-0001
1 total count:
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4 Source IP Attack Defense Configuration
VSI/VLAN(O/I/P) Interface,
10 /-- /-- Eth0/0/1,
1,
128