320
For IPv4 source guard:
Task Command
Display IPv4 source guard
binding entries.
display ip source binding [ static | [ vpn-instance vpn-instance-name ]
[ dhcp-relay | dhcp-server | dhcp-snooping ] ] [ ip-address ip-address ]
[ mac-address mac-address ] [ vlan vlan-id ] [ interface interface-type
interface-number ] [ slot slot-number ]
For IPv6 source guard:
Task Command
Display IPv6 source guard
binding entries.
display ipv6 source binding [ static | [ vpn-instance vpn-instance-name ]
[ dhcpv6-snooping ] ] [ ip-address ipv6-address ] [ mac-address mac-address ]
[ vlan vlan-id ] [ interface interface-type interface-number ] [ slot slot-number ]
IP source guard configuration examples
Static IPv4 source guard configuration example
Network requirements
As shown in Figure 105, all hosts use static IP addresses.
Configure static IPv4 source guard binding entries on Switch A and Switch B to meet the following
requirements:
• Ten-GigabitEthernet 1/0/2 of Switch A allows only IP packets from Host C to pass.
• Ten-GigabitEthernet 1/0/1 of Switch A allows only IP packets from Host A to pass.
• All interfaces of Switch B allow IP packets from Host A to pass.
• Ten-GigabitEthernet 1/0/1 of Switch B allows IP packets from Host B to pass.
Figure 105 Network diagram
Configuration procedure
1. Configure Switch A:
# Configure IP addresses for the interfaces. (Details not shown.)
# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/2.
To Next Page
Loading...
Need help?
General
