Displaying And Maintaining Ipsg; Ipsg Configuration Examples; Static Ipv4Sg Configuration Example - HPE FlexNetwork 5510 HI Series Security Configuration Manual

Displaying and maintaining IPSG

Execute display commands in any view and reset commands in user view.
Task
Display IPv4SG bindings.
Display IPv6SG bindings.

IPSG configuration examples

Static IPv4SG configuration example

Network requirements
As shown in
Configure static IPv4SG bindings on Switch A and Switch B to meet the following requirements:
•
GigabitEthernet 1/0/2 of Switch A allows only IP packets from Host C to pass.
•
GigabitEthernet 1/0/1 of Switch A allows only IP packets from Host A to pass.
•
All interfaces of Switch B allow IP packets from Host A to pass.
•
GigabitEthernet 1/0/1 of Switch B allows IP packets from Host B to pass.
Figure 117 Network diagram
GE1/0/2
Host A
IP: 192.168.0.1/24
MAC: 0001-0203-0406
Configuration procedure
1. Configure Switch A:
# Configure IP addresses for the interfaces. (Details not shown.)
# Enable IPv4SG on GigabitEthernet 1/0/2.
<SwitchA> system-view
[SwitchA] interface gigabitethernet 1/0/2
[SwitchA-GigabitEthernet1/0/2] ip verify source ip-address mac-address
# On GigabitEthernet 1/0/2, configure a static IPv4SG binding for Host C.
Command
display ip source binding [ static | [ vpn-instance vpn-instance-name ]
[ dhcp-relay | dhcp-server | dhcp-snooping ] ] [ ip-address ip-address ]
[ mac-address mac-address ] [ vlan vlan-id ] [ interface interface-type
interface-number ] [ slot slot-number ]
display ipv6 source binding [ static | [ vpn-instance vpn-instance-name ]
[ dhcpv6-snooping ] ] [ ip-address ipv6-address ] [ mac-address
mac-address ] [ vlan vlan-id ] [ interface interface-type interface-number ]
[ slot slot-number ]
Figure 117, all hosts use static IP addresses.
GE1/0/1
Switch A
GE1/0/1
Switch B
Host B
IP: 192.168.0.2/24
MAC: 0001-0203-0407
GE1/0/2
Host C
IP: 192.168.0.3/24
MAC : 0001-0203-0405
405