HP 3600 v2 Series Security Configuration Manual page 333

Figure 120 Network diagram
Configuration procedure
Configure Device A.
1.
# Configure the IPv4 source guard function on Ethernet 1/0/2 to filter packets based on both the source
IP address and MAC address.
<DeviceA> system-view
[DeviceA] interface ethernet 1/0/2
[DeviceA-Ethernet1/0/2] ip verify source ip-address mac-address
# Configure Ethernet 1/0/2 to allow only IP packets with the source MAC address of 0001-0203-0405
and the source IP address of 192.168.0.3 to pass.
[DeviceA] interface ethernet 1/0/2
[DeviceA-Ethernet1/0/2]
0001-0203-0405
[DeviceA-Ethernet1/0/2] quit
# Configure the IPv4 source guard function on Ethernet 1/0/1 to filter packets based on both the source
IP address and MAC address.
[DeviceA] interface ethernet 1/0/1
[DeviceA-Ethernet1/0/1] ip verify source ip-address mac-address
# Configure Ethernet 1/0/1 to allow only IP packets with the source MAC address of 0001-0203-0406
and the source IP address of 192.168.0.1 to pass.
[DeviceA-Ethernet1/0/1]
0001-0203-0406
[DeviceA-Ethernet1/0/1] quit
Configure Device B.
2.
# Configure the IPv4 source guard function on Ethernet 1/0/2 to filter packets based on both the source
IP address and MAC address.
[DeviceB] interface ethernet 1/0/2
[DeviceB-Ethernet1/0/2] ip verify source ip-address mac-address
# Configure Ethernet 1/0/2 to allow only IP packets with the source MAC address of 0001-0203-0406
and the source IP address of 192.168.0.1 to pass.
[DeviceB] interface ethernet 1/0/2
[DeviceB-Ethernet1/0/2]
0001-0203-0406
[DeviceB-Ethernet1/0/2] quit
ip source binding
ip source binding
ip source binding
322
ip-address 192.168.0.3
ip-address 192.168.0.1
ip-address 192.168.0.1
mac-address
mac-address
mac-address