Configuring A Static Ipv4Sg Binding - HPE FlexNetwork 7500 Series Security Configuration Manual

Step
3. Enable the IPv4SG
feature.

Configuring a static IPv4SG binding

You can configure global static and interface-specific static IPv4SG bindings.
Global static bindings take effect on all interfaces.
Interface-specific static bindings take priority over global static bindings. An interface first uses the
static bindings on the interface to match packets. If no match is found, the interface uses the global
bindings.
Configuring a global static IPv4SG binding
Step
1. Enter system view.
2. Configure a global static
IPv4SG binding.
Configuring a static IPv4SG binding on an interface
Step
1. Enter system view.
2. Enter interface view.
3. Configure a static
IPv4SG binding.
Command
ip verify source
{ ip-address | ip-address
mac-address |
mac-address }
Command
system-view
ip source binding ip-address
ip-address mac-address
mac-address
Command
system-view
interface interface-type
interface-number
ip source binding { ip-address
ip-address | ip-address
ip-address mac-address
mac-address | mac-address
mac-address } [ vlan vlan-id ]
405
Remarks
By default, the IPv4SG feature is disabled
on an interface.
If you configure this command on an
interface multiple times, the most recent
configuration takes effect.
Remarks
N/A
No global static IPv4SG bindings
exist.
Remarks
N/A
The following interface types are
supported:
•
Layer 2 Ethernet port.
•
Layer 2 aggregate interface.
•
Layer 3 Ethernet interface.
•
VLAN interface.
By default, no static IPv4SG bindings
exist on an interface.
The vlan vlan-id option is supported only
in Layer 2 Ethernet interface view and
Layer 2 aggregate interface view.
To configure a static IPv4SG binding for
the ARP attack detection feature, make
sure the following conditions are met:
•
The ip-address ip-address option,
the mac-address mac-address
option, and the vlan vlan-id option
must be specified.
•
ARP attack detection must be
enabled for the specified VLAN.
You can configure the same static
IPv4SG binding on different interfaces.