H3C S3610 Series Operation Manual page 5

Operation Manual – IP Source Guard
H3C S3610&S5510 Series Ethernet Switches
[SwitchA] interface ethernet 1/0/2
[SwitchA-Ethernet1/0/2]
0001-0203-0405
[SwitchA-Ethernet1/0/2] quit
# Configure port Ethernet 1/0/1 of Switch A to allow only IP packets with the source
MAC address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass.
[SwitchA] interface ethernet 1/0/1
[SwitchA-Ethernet1/0/1]
0001-0203-0406
2) Configure Switch B
# Configure the IP addresses of various interfaces (omitted).
# Configure port Ethernet 1/0/1 of Switch B to allow only IP packets with the source
MAC address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass.
<SwitchB> system-view
[SwitchB] interface ethernet 1/0/1
[SwitchB-Ethernet1/0/1]
0001-0203-0406
[SwitchB-Ethernet1/0/1] quit
# Configure port Ethernet 1/0/2 of Switch B to allow only IP packets with the source
MAC address of 00-01-02-03-04-07 and the source IP address of 192.168.0.2 to pass.
[SwitchB] interface ethernet 1/0/2
[SwitchB-Ethernet1/0/2]
0001-0203-0407
3) Verify the configuration
# On Switch A, static binding entries are configured successfully.
<SwitchA> display user-bind
The Following User address bind have been configured:
Mac
0001-0203-0405
0001-0203-0406
-------------2 bind entries queried, 2 listed------------
# On Switch B, static binding entries are configured successfully.
<SwitchB> display user-bind
The Following User address bind have been configured:
Mac
0001-0203-0406
0001-0203-0407
-------------2 bind entries queried, 2 listed------------
Chapter 1 IP Source Guard Configuration
user-bind ip-address
user-bind ip-address
user-bind ip-address
user-bind ip-address
IP
192.168.0.3
192.168.0.1
IP
192.168.0.1
192.168.0.2
1-4
192.168.0.3
192.168.0.1
192.168.0.1
192.168.0.2
Port
Ethernet1/0/2
Ethernet1/0/1
Port
Ethernet1/0/1
Ethernet1/0/2
mac-address
mac-address
mac-address
mac-address
Status
Static
Static
Status
Static
Static