261
[Switch-Vlan100] quit
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] ip check source ip-address mac-address
[Switch-Vlan-interface100] quit
2. Configure DHCP relay
# Enable DHCP relay.
[Switch] dhcp enable
# Configure the IP address of the DHCP server.
[Switch] dhcp relay server-group 1 ip 10.1.1.1
# Configure VLAN-interface 100 to work in DHCP relay mode.
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] dhcp select relay
# Correlate VLAN-interface 100 with DHCP server group 1.
[Switch-Vlan-interface100] dhcp relay server-select 1
[Switch-Vlan-interface100] quit
Verification
# Display the generated dynamic IPv4 source guard binding entries.
[Switch] display ip check source
Total entries found: 1
MAC Address IP Address VLAN Interface Type
0001-0203-0406 192.168.0.1 100 Vlan100 DHCP-RLY
Static IPv6 source guard binding entry configuration example
Network requirements
As shown in Figure 81, the host is connected to port GigabitEthernet 1/0/1 of the device. Configure a
static IPv6 source guard binding entry for GigabitEthernet 1/0/1 of the device to allow only packets from
the host to pass.
Figure 81 Network diagram for configuring static IPv6 source guard binding entries
Device
Host
IP: 2001::1
MAC: 0001-0202-0202
GE1/0/1
Internet
Configuration procedure
# Configure port GigabitEthernet 1/0/1 to allow only IPv6 packets with the source MAC address of
0001-0202-0202 and the source IPv6 address of 2001::1 to pass.
<Device> system-view
[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] user-bind ipv6 ip-address 2001::1 mac-address 0001-0202-
0202
[Device-GigabitEthernet1/0/1] quit
To Next Page
Loading...
