# Configure dynamic binding function on port GigabitEthernet 2/0/1 to filter packets based on both the
source IP address and MAC address.
<SwitchA> system-view
[SwitchA] interface gigabitethernet2/0/1
[SwitchA-GigabitEthernet2/0/1] ip check source ip-address mac-address
[SwitchA-GigabitEthernet2/0/1] quit
# Enable DHCP snooping.
[SwitchA] dhcp-snooping
# Configure the port connecting to the DHCP server as a trusted port.
[SwitchA] interface gigabitethernet 2/0/2
[SwitchA-GigabitEthernet2/0/2] dhcp-snooping trust
[SwitchA-GigabitEthernet2/0/2] quit
2)
Verify the configuration
# Check that the dynamic binding function is configured successfully on port GigabitEthernet 2/0/1.
[SwitchA] interface gigabitethernet 2/0/1
[SwitchA-GigabitEthernet2/0/1] display this
#
interface GigabitEthernet2/0/1
port link-mode bridge
ip check source ip-address mac-address
#
return
# Display the dynamic binding entries that port GigabitEthernet 2/0/1 has obtained from DHCP
snooping.
[SwitchA-GigabitEthernet2/0/1] display ip check source
Total entries found: 1
MAC
IP
0001-0203-0406
192.168.0.1
# Display the dynamic entries of DHCP snooping and check it is identical with the dynamic entries that
port GigabitEthernet 2/0/1 has obtained.
[SwitchA-GigabitEthernet2/0/1] display dhcp-snooping
DHCP Snooping is enabled.
The client binding table for all untrusted ports.
Type : D--Dynamic , S--Static
Type IP Address
==== =============== ============== ============ ==== =================
D
192.168.0.1
As you see, port GigabitEthernet 2/0/1 has obtained the dynamic entries generated by DHCP snooping
after it is configured with dynamic binding function.
Vlan
1
MAC Address
Lease
0001-0203-0406 86335
1-6
Port
GigabitEthernet 2/0/1
VLAN Interface
1
GigabitEthernet2/0/1
Status
DHCP-SNP
Need help?
Do you have a question about the S7906E and is the answer not in the manual?
Questions and answers