363
Figure 112 Network diagram
Configuration procedure
1. Configure the IPv4 source guard function:
# Configure the IP addresses of the interfaces. (Details not shown.)
# Configure the IPv4 source guard function on VLAN-interface 100 to filter packets based on both
the source IP address and MAC address.
<Switch> system-view
[Switch] vlan 100
[Switch-Vlan100] quit
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] ip verify source ip-address mac-address
[Switch-Vlan-interface100] quit
2. Configure the DHCP relay agent:
# Enable the DHCP service.
[Switch] dhcp enable
# Configure the IP address of the DHCP server.
[Switch] dhcp relay server-group 1 ip 10.1.1.1
# Configure VLAN-interface 100 to operate in DHCP relay mode.
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] dhcp select relay
# Correlate VLAN-interface 100 with DHCP server group 1.
[Switch-Vlan-interface100] dhcp relay server-select 1
[Switch-Vlan-interface100] quit
Verifying the configuration
# Display the generated IPv4 source guard entries.
[Switch] display ip source binding
Total entries found: 1
MAC Address IP Address VLAN Interface Type
0001-0203-0406 192.168.0.1 100 Vlan100 DHCP-RLY
Static IPv6 source guard configuration example
Network requirements
As shown in Figure 113 , the host is connected to port GigabitEthernet 1/0/1 of the device. Configure a
static IPv6 source guard entry for GigabitEthernet 1/0/1 of the device to allow only packets from the
host to pass.
To Next Page
Loading...
