HP 5120 SI Series

296
To do… Use the command… Remarks
Display static IPv6 source guard
entries
display user-bind ipv6 [ interface
interface-type interface-number | ip-address
ip-address | mac-address mac-address ] [ |
{ begin | exclude | include }
regular-expression ]
Available in any view
Display IPv6 source guard entries
display ip check source ipv6 [ interface
interface-type interface-number | ip-address
ip-address | mac-address mac-address ]
[ slot slot-number ] [ | { begin | exclude |
include } regular-expression ]
Available in any view
IP source guard configuration examples
Static IPv4 source guard configuration example
Network requirements
As shown in Figure 105, Host A and Host B are connected to ports GigabitEthernet 1/0/2 and
GigabitEthernet 1/0/1 of Device B, respectively, Host C is connected to port GigabitEthernet 1/0/2 of
Device A, and Device B is connected to port GigabitEthernet 1/0/1 of Device A.
Configure static IPv4 source guard entries on Device A and Device B to meet the following requirements:
• On port GigabitEthernet 1/0/2 of Device A, only IP packets from Host C can pass.
• On port GigabitEthernet 1/0/1 of Device A, only IP packets from Host A can pass.
• On port GigabitEthernet 1/0/2 of Device B, only IP packets from Host A can pass.
• On port GigabitEthernet 1/0/1 of Device B, only IP packets from Host B can pass.
Figure 100 Network diagram
Configuration procedure
1. Configure Device A
# Configure the IP addresses of the interfaces (omitted).
# Configure port GigabitEthernet 1/0/2 of Device A to allow only IP packets with the source MAC
address of 0001-0203-0405 and the source IP address of 192.168.0.3 to pass.
<DeviceA> system-view