Display And Debug Access Management - Huawei Quidway S3000-EI Series Operation Manual

Operation Manual - Network Protocol
Quidway S3000-EI Series Ethernet Switches
Port+MAC binding: binding the packet's receiving port and its source MAC
address. The specified port will only allow the packet with specified MAC address
to pass; meanwhile the packet with specified MAC address can only pass through
the specified port.
Port+IP+MAC binding: binding the packet's receiving port, source IP address and
source MAC address. The specified port will only allow the packet with specified IP
and MAC address to pass. The packet with specified IP address can only pass
through the specified port. Likewise, the packet with specified MAC address can
only pass from the specified port.
IP+MAC binding: binding the packet's source IP address and its source MAC
address. If the packet's source IP address and its specified IP is the same, then
the packet is relayed only when its source MAC address is the specified MAC
address. Likewise, if the packet's source MAC is the same as the specified MAC
address, then the packet is relayed only when its source IP address is the same as
the specified IP address.
Perform the following configuration in the system view.
Table 5-3 Binding Port, IP Address and MAC Address
Operation
Bind port, IP
address
MAC address
Remove
binding of port,
IP address and
MAC address
binding
Note that:
One MAC address or one IP address cannot be bound more than once.
The maximum binding number is 128.
Do not perform "Port+IP+MAC" and "Port+IP" on the same port.

5.3 Display and debug Access Management

After the above configuration, execute display command in any view to display the
current configurations of access management on the ports, and to verify the effect of
the configuration.
am user-bind { interface { interface-name | interface-type
interface-number } { mac-addr mac | ip-addr ip }* | mac-addr
mac { interface
and
interface-number } | ip-addr ip }* | ip-addr ip { interface
{ interface-name | interface-type interface-number } | mac-addr
mac }* }
undo am user-bind { interface { interface-name | interface-type
the
interface-number } { mac-addr mac | ip-addr ip }* | mac-addr
mac { interface
interface-number } | ip-addr ip }* | ip-addr ip { interface
{ interface-name | interface-type interface-number } | mac-addr
mac }* }
Huawei Technologies Proprietary
Chapter 5 Access Management Configuration
Command
{ interface-name
{ interface-name
5-3
| interface-type
| interface-type