Dynamic Ipv4Sg Using Dhcp Snooping Configuration Example - HP FlexFabric 5700 Series Security Configuration Manual

# Enable IPv4SG on Ten-GigabitEthernet 1/0/1.
[SwitchA] interface ten-gigabitethernet 1/0/1
[SwitchA-Ten-GigabitEthernet1/0/1] ip verify source ip-address mac-address
# On Ten-GigabitEthernet 1/0/1, configure a static IPv4SG binding for Host A.
[SwitchA-Ten-GigabitEthernet1/0/1] ip source binding ip-address 192.168.0.1
mac-address 0001-0203-0406
[SwitchA-Ten-GigabitEthernet1/0/1] quit
2. Configure Switch B:
# Configure an IP address for each interface. (Details not shown.)
# Enable IPv4SG on Ten-GigabitEthernet 1/0/2.
<SwitchB> system-view
[SwitchB] interface ten-gigabitethernet 1/0/2
[SwitchB-Ten-GigabitEthernet1/0/2] ip verify source ip-address mac-address
[SwitchB-Ten-GigabitEthernet1/0/2] quit
# Configure a static IPv4SG binding for Host A.
[SwitchB] ip source binding ip-address 192.168.0.1 mac-address 0001-0203-0406
# Enable IPv4SG on Ten-GigabitEthernet 1/0/1.
[SwitchB] interface ten-gigabitethernet 1/0/1
[SwitchB-Ten-GigabitEthernet1/0/1] ip verify source ip-address mac-address
# On Ten-GigabitEthernet 1/0/1, configure a static IPv4SG binding for Host B.
[SwitchB-Ten-GigabitEthernet1/0/1] ip source binding mac-address 0001-0203-0407
[SwitchB-Ten-GigabitEthernet1/0/1] quit
Verifying the configuration
# Verify that the static IPv4SG bindings are configured successfully on Switch A.
<SwitchA> display ip source binding static
Total entries found: 2
IP Address
192.168.0.1
192.168.0.3
# Verify that the static IPv4SG bindings are configured successfully on Device B.
<SwitchB> display ip source binding static
Total entries found: 2
IP Address
192.168.0.1
N/A

Dynamic IPv4SG using DHCP snooping configuration example

Network requirements
As shown in
Enable DHCP snooping on the device to record the IPv4 address and the MAC address of the host in a
DHCP snooping entry.
MAC Address
0001-0203-0405 XGE1/0/2
0001-0203-0406 XGE1/0/1
MAC Address
0001-0203-0406 N/A
0001-0203-0407 XGE1/0/1
Figure 107, the host (the DHCP client) obtains an IP address from the DHCP server.
Interface
Interface
352
VLAN Type
N/A Static
N/A Static
VLAN Type
N/A Static
N/A Static