1101
Predefined user roles
network-admin
Parameters
ip-address: Filters incoming packets by source IPv4 addresses.
ip-address mac-address: Filters incoming packets by source IPv4 addresses and source MAC
addresses.
mac-address: Filters incoming packets by source MAC addresses.
Usage guidelines
IMPORTANT:
The IPv4SG feature is not supported on Layer 2 Ethernet ports on the following modules if the
ip-address mac-address or mac-address keyword is specified:
• HMIM-8GSW.
• HMIM-8GSWF.
• HMIM-24GSW.
•
The matching criterion in this command applies only to dynamic IPSG. Static IPv4SG uses static
bindings configured by using the ip source binding command.
Dynamic bindings generated from different source modules (802.1X, DHCP snooping, and WLAN
snooping) are for different security services. For more information, see Security Configuration Guide.
You cannot enable dynamic IPv4SG on a service loopback interface.
Examples
# Enable IPv4SG on Layer 2 Ethernet interface GigabitEthernet 1/0/1 and verify the source IPv4
address and MAC address for dynamic IPSG.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] ip verify source ip-address mac-address
Related commands
display ip source binding
ipv6 source binding (interface view)
Use ipv6 source binding to configure a static IPv6SG binding.
Use undo ipv6 source binding to delete the static IPv6SG bindings configured on the interface.
Syntax
ipv6 source binding { ip-address ipv6-address | ip-address ipv6-address mac-address
mac-address | mac-address mac-address } [ vlan vlan-id ]
undo ipv6 source binding { all | ip-address ipv6-address | ip-address ipv6-address
mac-address mac-address | mac-address mac-address } [ vlan vlan-id ]
Default
No static IPv6SG bindings exist on an interface.
Views
Layer 2 Ethernet interface view
To Next Page
Loading...
Need help?
General
