Operation Manual – Port Security-Port Binding
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 2
Port Binding Configuration
2-2
Table 2-2 Display port binding configuration
Operation Command Description
Display port
binding
information
display am user-bind
[ interface interface-type
interface-number | mac-addr
mac-addr | ip-addr ip-addr]
You can execute the display
command in any view.
2.3 Port Binding Configuration Example
I. Network requirements
It is required to bind the MAC and IP addresses of PC1 to Ethernet1/0/1 on switch A, so
as to prevent malicious users from using the IP address they steal from PC1 to access
the network.
II. Network diagram
Switch A Switch BSwitch A Switch B
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch B
Ethernet1/0/1
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch B
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch B
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch BSwitch A Switch BSwitch A Switch B
PC1
MAC: 0001-0002-0003
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch BSwitch A Switch BSwitch A Switch B
Ethernet1/0/1Ethernet1/0/1
PC1
MAC: 0001-0002-0003
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch BSwitch A Switch BSwitch A Switch B
PC1
MAC: 0001-0002-0003
PC1
MAC: 0001-0002-0003
Switch A Switch BSwitch A Switch BSwitch A Switch BSwitch A Switch B
PC1
MAC: 0001-0002-0003
n
Figure 2-1 Network diagram for port binding configuratio
III. Configuration procedure
Configure switch A as follows:
# Enter system view.
<S3600> system-view
# Enter Ethernet1/0/1 port view.
[S3600] interface Ethernet1/0/1
# Bind the MAC address and the IP address of PC1 to Ethernet1/0/1.
[S3600-Ethernet1/0/1] am user-bind mac-addr 0001-0002-0003 ip-addr 10.12.1.1