Configuring Port Filtering; Displaying Ip Source Guard - H3C S3610-28P Operation Manual

Operation Manual – IP Source Guard
H3C S3610&S5510 Series Ethernet Switches
Configure a static binding
entry
Note:
The system does not support repeatedly binding a binding entry to one port. A
binding entry can be configured to multiple ports
In a valid binding entry, the MAC address cannot be all 0s, all Fs (a broadcast
address), or a multicast address, and the IP address can only be a Class A, Class B,
or Class C address and can be neither 127.x.x.x nor 0.0.0.0.

1.3 Configuring Port Filtering

Port filtering allows IP source guard to filter packets based on the MAC-IP-port binding
entries created and maintained by DHCP snooping.
Follow these steps to configure port filtering:
To do...
Enter system view
Enter interface view
Configure port
filtering

1.4 Displaying IP Source Guard

To do...
Display information
about static binding
entries
Display information
about dynamic
binding entries
To do...
user-bind ip-address
ip-address
[ mac-address
mac-address
Use the command...
system-view
interface interface-type
interface-number
ip check source ip-address
[ mac-address ]
display user-bind [ interface
interface-type interface-number |
ip-address ip-address |
mac-address mac-address ]
display ip check source [ interface
interface-type interface-number |
ip-address ip-address |
mac-address mac-address ]
Chapter 1 IP Source Guard Configuration
Use the command...
Use the command...
1-2
Remarks
Required
No static binding entry
exists by default.
Remarks
—
—
Required
Not configured by default
Remarks
Available in any view
Available in any view