HP 6600 Security Configuration Manual page 518

Table of Contents

Advertisement

[RouterA-GigabitEthernet3/0/1] ip verify source ip-address mac-address
# Configure GigabitEthernet 3/0/1 to allow only IP packets with the source MAC address of
0001-0203-0406 and the source IP address of 192.168.0.1 to pass.
[RouterA-GigabitEthernet3/0/1] ip source binding ip-address 192.168.0.1 mac-address
0001-0203-0406
[RouterA-GigabitEthernet3/0/1] quit
2.
Configure Router B:
# Enable IPv4 source guard on GigabitEthernet 3/0/2 to filter packets based on both the source
IP address and MAC address.
<RouterB> system-view
[RouterB] interface gigabitethernet 3/0/2
[RouterB-GigabitEthernet3/0/2] ip verify source ip-address mac-address
# Configure GigabitEthernet 3/0/2 to allow only IP packets with the source MAC address of
0001-0203-0406 and the source IP address of 192.168.0.1 to pass.
[RouterB-GigabitEthernet3/0/2] ip source binding ip-address 192.168.0.1 mac-address
0001-0203-0406
[RouterB-GigabitEthernet3/0/2] quit
# Enable IPv4 source guard on GigabitEthernet 3/0/1 to filter packets based on the source IP
address.
[RouterB] interface gigabitethernet 3/0/1
[RouterB-GigabitEthernet3/0/1] ip verify source ip-address
# Configure GigabitEthernet 3/0/1 to allow only IP packets with the source IP address of
192.168.0.2 to pass.
[RouterB-GigabitEthernet3/0/1] ip source binding ip-address 192.168.0.2
[RouterB-GigabitEthernet3/0/1] quit
Verifying the configuration
# On Router A, display information about static IPv4 source guard entries. The output shows that the
static IPv4 source guard entries are configured successfully.
[RouterA] display ip source binding static
Total entries found: 2
MAC Address
0001-0203-0405
0001-0203-0406
# On Router B, display information about static IPv4 source guard entries. The output shows that the static
IPv4 source guard entries are configured successfully.
[RouterB] display ip source binding static
Total entries found: 2
MAC Address
0001-0203-0406
N/A
IP Address
VLAN
192.168.0.3
N/A
192.168.0.1
N/A
IP Address
VLAN
192.168.0.1
N/A
192.168.0.2
N/A
504
Interface
GE3/0/2
GE3/0/1
Interface
GE3/0/2
GE3/0/1
Type
Static
Static
Type
Static
Static

Advertisement

Table of Contents
loading

This manual is also suitable for:

Hsr6600

Table of Contents