Related commands
display ip source binding
•
ip source binding (system view)
•
ip source binding (system view)
Use ip source binding to configure a global static IPv4 source guard binding entry.
Use undo ip source binding to remove one or all global static IPv4 source guard binding entries.
Syntax
ip source binding ip-address ip-address mac-address mac-address
undo ip source binding { all | ip-address ip-address mac-address mac-address }
Default
No global static IPv4 source guard binding entry exists.
Views
System view
Predefined user roles
network-admin
Parameters
ip-address ip-address: Specifies the IPv4 address for the static IPv4 source guard binding entry. The IPv4
address cannot be 127.x.x.x, 0.0.0.0, or a multicast IP address.
mac-address mac-address: Specifies the MAC address for the static IPv4 source guard binding entry. The
MAC address is in the format H-H-H but cannot be all 0s, all Fs (a broadcast address), or a multicast
address.
all: Specifies all global static IPv4 source guard binding entries.
Usage guidelines
A global static IPv4 source guard binding entry takes effect on all interfaces.
Examples
# Configure a global static IPv4 source guard binding entry to allow only the packets with source IP
address 192.168.0.1 and source MAC address 0001-0001-0001 to pass.
<Sysname> system-view
[Sysname] ip source binding ip-address 192.168.0.1 mac-address 0001-0001-0001
Related commands
display ip source binding static
•
ip source binding (interface view)
•
ip verify source
Use ip verify source to enable the IPv4 source guard function.
Use undo ip verify source to restore the default.
209