359
Task Command Remarks
Display static IPv4 source guard
entries.
display ip source binding static [ interface
interface-type interface-number |
ip-address ip-address | mac-address
mac-address ] [ slot slot-number ] [ | { begin
| exclude | include } regular-expression ]
Available in any view
Display IPv4 source guard entries.
display ip source binding [ interface
interface-type interface-number |
ip-address ip-address | mac-address
mac-address ] [ slot slot-number ] [ | { begin
| exclude | include } regular-expression ]
Available in any view
For IPv6 source guard:
Task Command Remarks
Display static IPv6 source guard
entries.
display ipv6 source binding static [ interface
interface-type interface-number |
ipv6-address ipv6-address | mac-address
mac-address ] [ slot slot-number ] [ | { begin |
exclude | include } regular-expression ]
Available in any view
Display IPv6 source guard entries.
display ipv6 source binding [ interface
interface-type interface-number |
ipv6-address ipv6-address | mac-address
mac-address ] [ slot slot-number ] [ | { begin |
exclude | include } regular-expression ]
Available in any view
IP source guard configuration examples
Static IPv4 source guard configuration example
Network requirements
As shown in Figure 110, Host A and Host B are connected to ports GigabitEthernet 1/0/2 and
GigabitEthernet 1/0/1 of Device B respectively, Host C is connected to port GigabitEthernet 1/0/2 of
Device A, and Device B is connected to port GigabitEthernet 1/0/1 of Device A. All hosts use static IP
addresses.
Configure static IPv4 source guard entries on Device A and Device B to meet the following requirements:
• On port GigabitEthernet 1/0/2 of Device A, only IP packets from Host C can pass.
• On port GigabitEthernet 1/0/1 of Device A, only IP packets from Host A can pass.
• On port GigabitEthernet 1/0/2 of Device B, only IP packets from Host A can pass.
• On port GigabitEthernet 1/0/1 of Device B, only IP packets sourced from 192.168.0.2/24 can
pass. Host B can communicate with Host A by using this IP address even if it uses another network
adapter.