Page 1
Operation Manual – IP Source Guard H3C S3610&S5510 Series Ethernet Switches Table of Contents Table of Contents Chapter 1 IP Source Guard Configuration .................. 1-1 1.1 IP Source Guard Overview ....................1-1 1.2 Configuring a Static Binding Entry ..................1-1 1.3 Configuring Port Filtering ....................
Page 2
Operation Manual – IP Source Guard H3C S3610&S5510 Series Ethernet Switches Chapter 1 IP Source Guard Configuration Chapter 1 IP Source Guard Configuration When configuring IP Source Guard, go to these sections for information you are interested in: IP Source Guard Overview...
Page 3
Operation Manual – IP Source Guard H3C S3610&S5510 Series Ethernet Switches Chapter 1 IP Source Guard Configuration To do… Use the command… Remarks user-bind ip-address Required Configure a static binding ip-address No static binding entry entry [ mac-address exists by default.
Page 4
Operation Manual – IP Source Guard H3C S3610&S5510 Series Ethernet Switches Chapter 1 IP Source Guard Configuration 1.5 IP Source Guard Configuration Examples 1.5.1 Static Binding Entry Configuration Example I. Network requirements As shown in Figure 1-1, switches A and B and Hosts A, B and C are on an Ethernet.
Page 5
Operation Manual – IP Source Guard H3C S3610&S5510 Series Ethernet Switches Chapter 1 IP Source Guard Configuration [SwitchA] interface ethernet 1/0/2 [SwitchA-Ethernet1/0/2] user-bind ip-address 192.168.0.3 mac-address 0001-0203-0405 [SwitchA-Ethernet1/0/2] quit # Configure port Ethernet 1/0/1 of Switch A to allow only IP packets with the source MAC address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass.
Page 6
Operation Manual – IP Source Guard H3C S3610&S5510 Series Ethernet Switches Chapter 1 IP Source Guard Configuration 1.5.2 Port Filtering Configuration Example I. Network requirements Switch A connects to Client A and the DHCP Server through Ethernet 1/0/1 and Ethernet 1/0/2 respectively. DHCP Snooping is enabled on Switch A.
Page 7
Operation Manual – IP Source Guard H3C S3610&S5510 Series Ethernet Switches Chapter 1 IP Source Guard Configuration # Port filtering is configured successfully on port Ethernet 1/0/1. [SwitchA] interface ethernet1/0/1 [SwitchA-Ethernet1/0/1] display this interface Ethernet1/0/1 ip check source ip-address mac-address...
Need help?
Do you have a question about the S3610 Series and is the answer not in the manual?
Questions and answers