2-1 
2  Port Binding Configuration 
When configuring port binding, go to these sections for information you are interested in: 
z  Port Binding Overview 
z  Displaying and Maintaining Port Binding Configuration 
z  Port Binding Configuration Example 
Port Binding Overview 
Introduction 
Port binding enables the network administrator to bind the MAC address and IP address of a user to a 
specific port. After the binding, the switch forwards only the packets received on the port whose MAC 
address and IP address are identical with the bound MAC address and IP address. This improves 
network security and enhances security monitoring. 
Configuring Port Binding 
Follow these steps to configure port binding: 
To do...  Use the command...  Remarks 
Enter system view 
system-view 
— 
In system 
view 
am user-bind mac-addr mac-address 
ip-addr ip-address interface 
interface-type interface-number 
interface interface-type interface-number 
Bind the MAC 
address and 
IP address of 
a user to a 
specific port 
In Ethernet 
port view 
am user-bind mac-addr mac-address 
ip-addr ip-address 
Either is required. 
By default, no user 
MAC address or IP 
address is bound to a 
port. 
 
 
z  An IP address can be bound to only one port at a time. 
z  A MAC address can be bound to only one port at a time.  
 
Displaying and Maintaining Port Binding Configuration 
To do...  Use the command...  Remarks 
Display port binding 
information 
display am user-bind [ interface interface-type 
interface-number | ip-addr ip-address  | mac-addr 
mac-address ] 
Available in any 
view