Displaying Ip Source Guard; Ip Source Guard Configuration Examples; Static Binding Entry Configuration Example - H3C S5500-EI series Operation Manual

Operation Manual – IP Source Guard
H3C S5500-EI Series Ethernet Switches

1.4 Displaying IP Source Guard

To do...
Display information
about static binding
entries
Display information
about dynamic
binding entries

1.5 IP Source Guard Configuration Examples

1.5.1 Static Binding Entry Configuration Example

I. Network requirements
As shown in
Host A and
GigabitEthernet1/0/2 of Switch B respectively, Host C is connected to port
GigabitEthernet1/0/2 of Switch A, while Switch B is connected to port
GigabitEthernet1/0/1 of Switch A.
Detailed requirements are as follows:
On port GigabitEthernet1/0/2 of Switch A, only IP packets with the source MAC
address of 00-01-02-03-04-05 and the source IP address of 192.168.0.3 can pass.
On port GigabitEthernet1/0/1 of Switch A, only IP packets with the source MAC
address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 can pass.
On port GigabitEthernet1/0/1 of Switch B, only IP packets with the source MAC
address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 can pass.
On port GigabitEthernet1/0/2 of Switch B, only IP packets with the source MAC
address of 00-01-02-03-04-07 and the source IP address of 192.168.0.2 can pass.
Use the command...
display user-bind [ interface
interface-type interface-number |
ip-address ip-address | mac-address
mac-address ]
display ip check source [ interface
interface-type interface-number |
ip-address ip-address | mac-address
mac-address ]
Figure 1-1, switches A and B and Hosts A, B and C are on an Ethernet.
Host B are connected
Chapter 1 IP Source Guard Configuration
to ports
1-3
Remarks
Available in any
view
Available in any
view
GigabitEthernet1/0/1 and