Enabling Ip Source Guard; Configuring The Check Items Of Ip Packets - Huawei Quidway S9300 Configuration Manual

3 IP Source Guard Configuration
Context
For the IP address statically assigned to the user, the S9300 cannot automatically learn the MAC
address of the user or generate the binding table. You need to create the binding table manually.
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
user-bind static ip-address ip-address [ mac-address mac-address | interface
interface-type interface-number ]
A static entry in the binding table is configured.
l
l
----End

3.3.3 Enabling IP Source Guard

Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Run:
interface interface-type interface-number
The interface view is displayed.
This is a user-side interface. The interface can be an Ethernet interface, a GE interface, or an
Eth-Trunk interface.
Step 3 Run:
ip source check user-bind enable
The IP source guard function is enabled on the interface.
By default, the interfaces of an S9300 are not enabled with the IP source guard function.
----End

3.3.4 Configuring the Check Items of IP Packets

3-4
ip-address and vlan are mandatory.
mac-address and interface are optional. You do not need to set the two parameters if they
are unnecessary.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Quidway S9300 Terabit Routing Switch
*
vlan vlan-id [ ce-vlan vlan-id ]
Configuration Guide - Security
Issue 01 (2009-07-28)