Ip Verify Source - H3C MSR Series Command Reference Manual

Comware 7 security
Hide thumbs Also See for MSR Series:
Table of Contents

Advertisement

Usage guidelines
IMPORTANT:
Static IPv4SG bindings that contain MAC addresses are not supported on Layer 2 Ethernet ports on
the following modules:
• HMIM-8GSW.
• HMIM-8GSWF.
• HMIM-24GSW.
• HMIM-24GSWP.
Static IPv4SG bindings that contain IP addresses or VLANs are not supported on the following
routers:
• MSR810-W.
• MSR810-W-DB.
• MSR810-LM.
• MSR810-W-LM.
• MSR810-10-PoE.
• MSR810-LM-HK.
• MSR810-W-LM-HK.
• MSR2600-10-X1.
Static IPv4SG bindings on an interface implement the following functions:
Filter incoming IPv4 packets on the interface.
Check user validity by cooperating with the ARP attack detection feature.
You cannot configure static IPv4SG bindings on a service loopback interface.
Examples
# Configure a static IPv4SG binding on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] ip source binding ip-address 192.168.0.1 mac-address
0001-0001-0001
Related commands
display ip source binding

ip verify source

Use ip verify source to enable both static and dynamic IPv4SG on an interface.
Use undo ip verify source to disable IPv4SG on an interface.
Syntax
ip verify source { ip-address | ip-address mac-address | mac-address }
undo ip verify source
Default
The IPv4SG feature is disabled on an interface.
Views
Layer 2 Ethernet interface view
1100

Advertisement

Table of Contents
loading

Table of Contents