Ipsg Configuration Examples; Static Ipv4Sg Configuration Example - HP FlexFabric 5700 Series Security Configuration Manual

Task
Display IPv4SG bindings.
Display IPv6SG bindings.

IPSG configuration examples

Static IPv4SG configuration example

Network requirements
As shown in
Configure static IPv4SG bindings on Switch A and Switch B to meet the following requirements:
Ten-GigabitEthernet 1/0/2 of Switch A allows only IP packets from Host C to pass.
•
Ten-GigabitEthernet 1/0/1 of Switch A allows only IP packets from Host A to pass.
•
All interfaces of Switch B allow IP packets from Host A to pass.
•
• Ten-GigabitEthernet 1/0/1 of Switch B allows IP packets from Host B to pass.
Figure 106 Network diagram
Configuration procedure
1. Configure Switch A:
# Configure IP addresses for the interfaces. (Details not shown.)
# Enable IPv4SG on Ten-GigabitEthernet 1/0/2.
<SwitchA> system-view
[SwitchA] interface ten-gigabitethernet 1/0/2
[SwitchA-Ten-GigabitEthernet1/0/2] ip verify source ip-address mac-address
# On Ten-GigabitEthernet 1/0/2, configure a static IPv4SG binding for Host C.
[SwitchA-Ten-GigabitEthernet1/0/2] ip source binding ip-address 192.168.0.3
mac-address 0001-0203-0405
[SwitchA-Ten-GigabitEthernet1/0/2] quit
Command
display ip source binding [ static | [ dhcp-relay | dhcp-server |
dhcp-snooping ] ] [ ip-address ip-address ] [ mac-address mac-address ] [ vlan
vlan-id ] [ interface interface-type interface-number ] [ slot slot-number ]
display ipv6 source binding [ static | [ dhcpv6-snooping ] ] [ ip-address
ipv6-address ] [ mac-address mac-address ] [ vlan vlan-id ] [ interface
interface-type interface-number ] [ slot slot-number ]
Figure 106, all hosts use static IP addresses.
351