Configuring Ip Source Guard; Establishing The Configuration Task; Optional) Configuring Static User Binding Table - Huawei Quidway S9300 Configuration Manual

Quidway S9300 Terabit Routing Switch
Configuration Guide - Security
l
l

3.3 Configuring IP Source Guard

This section describes how to configure IP source guard.

3.3.1 Establishing the Configuration Task

3.3.2 (Optional) Configuring Static User Binding Table

3.3.3 Enabling IP Source Guard
3.3.4 Configuring the Check Items of IP Packets
3.3.5 Checking the Configuration
3.3.1 Establishing the Configuration Task
Applicable Environment
After the IP source guard function is configured on the S9300, the S9300 checks the IP packets
according to the binding table. Only the IP packets that match the content of the binding table
can be forwarded; the other IP packets are discarded.
Pre-configuration Tasks
Before configuring IP source guard, complete the following tasks:
l
Data Preparation
To configure IP source guard, you need the following data.
No.
1
2
3.3.2 (Optional) Configuring Static User Binding Table
Issue 01 (2009-07-28)
After the DHCP snooping function is enabled for DHCP users, the binding table is
dynamically generated for the DHCP users.
When users are configured with IP addresses statically, you need to configure the binding
table by running commands.
NOTE
For the configurations of DHCP snooping, see
2.3.2 Enabling DHCP Snooping
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2 DHCP Snooping Configuration.
if there are DHCP users
Data
(Optional) Information about the static
binding table, including IP addresses, MAC
addresses (optional), VLANs, interfaces
Type and number of the interface enabled
with the IP source guard function
3 IP Source Guard Configuration
3-3