Table of Contents
Advertisement
Related commands
display ip source binding
ip source binding (interface view)
ip verify source
Use ip verify source to enable IPv4SG on an interface.
Use undo ip verify source to disable IPv4SG on an interface.
Syntax
ip verify source { ip-address | ip-address mac-address | mac-address }
undo ip verify source
Default
The IPv4SG feature is disabled on an interface.
Views
Layer 2 Ethernet interface view
Layer 3 Ethernet interface view
VLAN interface view
Predefined user roles
network-admin
mdc-admin
Parameters
ip-address: Filters incoming packets by source IPv4 addresses.
ip-address mac-address: Filters incoming packets by source IPv4 addresses and source MAC
addresses.
mac-address: Filters incoming packets by source MAC addresses.
Usage guidelines
After you enable IPv4SG on an interface, this feature uses static and dynamic IPv4SG bindings to
match incoming packets on the interface. Packets that match an IPv4SG binding are forwarded and
packets that do not match any IPv4SG binding are discarded.
The matching criterion specified by this command applies only to dynamic IPSG. Static IPv4SG uses
static bindings configured by using the ip source binding command.
You cannot enable dynamic IPv4SG on a service loopback interface.
Examples
# Enable IPv4SG on Layer 2 Ethernet interface Ten-GigabitEthernet 1/0/1 and verify the source IPv4
address and MAC address for dynamic IPSG.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] ip verify source ip-address mac-address
# Enable IPv4SG on VLAN-interface 100 and verify the source IPv4 address and MAC address for
dynamic IPSG.
<Sysname> system-view
[Sysname] interface vlan-interface 100
[Sysname-Vlan-interface100] ip verify source ip-address mac-address
611
Advertisement
Table of Contents
