Configuring Ip Filtering - H3C S3100 Series Operation Manual

If you configure a remote ID sub-option in both system view and on a port, the remote ID sub-option
configured on the port applies when the port receives a packet, and the global remote ID applies to
other interfaces that have no remote ID sub-option configured.
If you have configured a remote ID with the vlan vlan-id argument specified, and the other one
without the argument in Ethernet port view, the former remote ID applies to the DHCP messages
from the specified VLAN, while the latter one applies to DHCP messages from other VLANs.
In a port aggregation group, you can use this command to configure the primary and member ports
respectively. When Option 82 is added, however, the remote ID is subject to the one configured on
the primary port.
The remote ID configured on a port will not be synchronized in the case of port aggregation.
Configure the padding format for Option 82
Follow these steps to configure the padding format for Option 82:
Operation
Enter system view
Configure the padding format

Configuring IP Filtering

Only the S3100-EI series among S3100 series switches support IP filtering.
Follow these steps to Configure IP filtering:
Operation
Enter system view
Enter Ethernet port view
Enable IP filtering
Create an IP static binding
entry
Command
system-view
dhcp-snooping information
packet-format { extended |
standard }
Command
system-view
interface interface-type
interface-number
ip check source ip-address
[ mac-address ]
ip source static binding
ip-address ip-address
[ mac-address mac-address ]
3-11
Description
—
Optional
By default, the padding format
is in extended format.
Description
—
—
Required
By default, this function is
disabled.
Optional
By default, no static binding
entry is created.