3Com Switch 4800G 24-Port - Configuring Dynamic Binding Function; Displaying IP Source Guard; IP Source Guard Configuration Examples

178 CHAPTER 21: IP SOURCE GUARD CONFIGURATION
n
■ The system does not support repeatedly configuring a binding entry to one
port. A binding entry can be configured to multiple ports.
■ In a valid binding entry, the MAC address cannot be all 0s, all Fs (a broadcast
address), or a multicast address, and the IP address can only be a Class A, Class
B, or Class C address and can be neither 127.x.x.x nor 0.0.0.0.
Configuring Dynamic
Binding Function
After the dynamic binding function is enabled on a port, IP source guard will
receive and process corresponding DHCP Snooping entries, which contain such
information as MAC address, IP address, VLAN tag, port information or entry type.
It adds the obtained information to the dynamic binding entries to enable the port
to filter packets according to the binding entries.
Follow these steps to configure dynamic binding function:
Displaying IP Source
Guard
IP Source Guard
Configuration
Examples
Static Binding Entry
Configuration Example
Network requirements
As shown in Figure 47, switches A and B and Hosts A, B and C are on an Ethernet.
Host A and Host B are connected to ports GigabitEthernet1/0/1 and
GigabitEthernet1/0/2 of Switch B respectively, Host C is connected to port
GigabitEthernet1/0/2 of Switch A, while Switch B is connected to port
GigabitEthernet1/0/1 of Switch A.
Detailed requirements are as follows:
Configure a static binding
entry
user-bind { ip-address ip-address |
ip-address ip-address mac-address
mac-address | mac-address
mac-address }
Required
No static binding
entry exists by
default.
To do… Use the command… Remarks
To do… Use the command… Remarks
Enter system view system-view -
Enter interface view interface interface-type interface-number -
Configure dynamic
binding function
ip check source { ip-address | ip-address
mac-address | mac-address }
Required
Not configured by default
To do… Use the command… Remarks
Display information
about static binding
entries
display user-bind [ interface interface-type
interface-number | ip-address ip-address |
mac-address mac-address ]
Available in any
view
Display information
about dynamic binding
entries
display ip check source [ interface
interface-type interface-number | ip-address
ip-address | mac-address mac-address ]
Available in any
view