Setting The Maximum Number Of Ipv4 Source Guard Binding Entries - HP 5500 HI Series Configuration Manual

Security
Hide thumbs Also See for 5500 HI Series:
Table of Contents

Advertisement

Step
1.
Enter system view.
2.
Configure a global static IPv4
binding entry.
Configuring port-based static IPv4 binding entries
When you configure port-based static IPv4 source guard entries, follow these guidelines:
You cannot repeatedly configure the same static binding entry on one port, but you can configure
the same static entry on different ports.
IP source guard does not use the VLAN information (if specified) in static IPv4 binding entries to
filter packets.
When the ARP detection function is configured, be sure to specify the VLAN where ARP detection
is configured in static IPv4 binding entries. Otherwise, ARP packets are discarded because they
cannot match any static IPv4 binding entry.
If a static binding entry to be added denotes the same binding as an existing dynamic binding entry,
the new static binding entry overwrites the dynamic binding entry.
To configure a static IPv4 binding entry on a port:
Step
1.
Enter system view.
2.
Enter Layer 2 interface view.
3.
Configure a static IPv4 source
guard entry on the port.
Setting the maximum number of IPv4 source guard binding
entries
The maximum number of IPv4 source guard entries is used to limit the total number of static and dynamic
IPv4 source guard entries on a port. When the number of IPv4 binding entries on a port reaches the
maximum, the port does not allowed new IPv4 binding entries any more.
If the maximum number of IPv4 binding entries to be configured is smaller than the number of existing
IPv4 binding entries on the port, the maximum number can be configured successfully, and the existing
entries are not affected. New IPv4 binding entries, however, cannot be added until the number of IPv4
binding entries on the port drops below the configured maximum.
To configure the maximum number of IPv4 binding entries allowed on a port:
Step
1.
Enter system view.
Command
system-view
ip source binding ip-address
ip-address mac-address
mac-address
Command
system-view
interface interface-type
interface-number
ip source binding { ip-address
ip-address | ip-address ip-address
mac-address mac-address |
mac-address mac-address } [ vlan
vlan-id ]
Command
system-view
355
Remarks
N/A
No global static IPv4 binding entry
is configured by default.
Remarks
N/A
N/A
By default, no static IPv4 binding
entry is configured on a port.
Remarks
N/A

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents