Dynamic Binding Function Configuration Example - 3Com S7906E Configuration Manual

# Configure port GigabitEthernet 2/0/1 of Switch B to allow only IP packets with the source MAC
address of 00-01-02-03-04-07 and the source IP address of 192.168.0.2 to pass.
[SwitchB] interface gigabitethernet 2/0/1
[SwitchB-GigabitEthernet2/0/1] user-bind ip-address 192.168.0.2 mac-address 0001-0203-0407
3) Verify the configuration
# On Switch A, static binding entries are configured successfully.
<SwitchA> display user-bind
Total entries found: 2
MAC
0001-0203-0405
0001-0203-0406
# On Switch B, static binding entries are configured successfully.
<SwitchB> display user-bind
Total entries found: 2
MAC
0001-0203-0406
0001-0203-0407

Dynamic Binding Function Configuration Example 1

Network requirements
As shown in Figure
GigabitEthernet 2/0/1 and GigabitEthernet 2/0/2 respectively. DHCP snooping is enabled on Switch A.
Detailed requirements are as follows:
Client A (with the MAC address of 00-01-02-03-04-06) obtains an IP address through the DHCP
server.
On Switch A, create a DHCP snooping entry for Client A.
On port GigabitEthernet 2/0/1 of Switch A, enable dynamic binding function to prevent attackers
from using forged IP addresses to attack the server.
For detailed configuration of a DHCP server, refer to DHCP Configuration in the IP Service Volume.
Figure 1-2 Network diagram for configuring dynamic binding
Configuration procedure
1) Configure Switch A
IP Vlan
192.168.0.3 N/A
192.168.0.1 N/A
IP Vlan
192.168.0.1 N/A
192.168.0.2 N/A
1-2, Switch A connects to Client A and the DHCP server through ports
Port
GigabitEthernet2/0/2
GigabitEthernet2/0/1
Port
GigabitEthernet2/0/2
GigabitEthernet2/0/1
1-5
Status
Static
Static
Status
Static
Static