H3C S7500E Series Command Manual page 196

Command Manual – IP Source Guard
H3C S7500E Series Ethernet Switches
Note that you cannot configure the dynamic binding function on a port that is in an
aggregation group.
Related commands: display ip check source.
Examples
# Configure dynamic binding function on port Ethernet 2/0/1 to filter packets based on
both source IP address and MAC address.
<Sysname> system-view
[Sysname] interface ethernet 2/0/1
[Sysname-Ethernet2/0/1] ip check source ip-address mac-address
1.1.4 user-bind
Syntax
user-bind { ip-address ip-address | ip-address ip-address
mac-address | mac-address mac-address }
undo user-bind { ip-address ip-address | ip-address ip-address mac-address
mac-address | mac-address mac-address }
View
Ethernet interface view
Parameters
ip-address ip-address: Specifies the IP address for the static binding. The IP address
can only be a Class A, Class B, or Class C address and can be neither 127.x.x.x nor
0.0.0.0.
mac-address mac-address: Specifies the MAC address for the static binding in the
format of H-H-H. The MAC address cannot be all 0s, all Fs (a broadcast address), or a
multicast address.
Description
Use the user-bind command to configure a static binding.
Use the undo user-bind command to delete a static binding.
By default, no static binding exists on a port.
Note that:
The system does not support repeatedly configuring a binding entry to one port. A
binding entry can be configured to multiple ports.
In a valid binding entry, the MAC address cannot be all 0s, all Fs (a broadcast
address), or a multicast address, and the IP address can only be a Class A, Class
B, or Class C address and can be neither 127.x.x.x nor 0.0.0.0.
Chapter 1 IP Source Guard Commands
1-4
mac-address