518
Parameters
all: Removes all the static IPv4 source guard binding entries on the interface.
ip-address ip-address: Specifies an IPv4 address for the static binding entry. The IPv4 address must be a
class A, B, or C address, and cannot be 127.x.x.x, 0.0.0.0, or a multicast IP address.
mac-address mac-address: Specifies a MAC address for the static binding entry. The MAC address must
be in H-H-H format, and cannot be all 0s, all Fs (a broadcast address), or a multicast address.
vlan vlan-id: Specifies a VLAN ID for the static binding entry. The value range is 1 to 4094.
Usage guidelines
IP source guard can use static IPv4 source guard binding entries on an interface to implement the
following functions:
• Filter incoming IPv4 packets on the interface.
• Check user validity by cooperating with the ARP detection feature.
The maximum number of static IPv4 source guard binding entries on a Layer 2 interface varies by
hardware:
• MSR routers installed with the Layer 2 switching module HMIM-24GSW/24GSWP or HMIM-8GSW:
384
• The fixed Layer 2 Ethernet ports on the MSR2004-24 and MSR2004-48: 256
Examples
# Bind IP address 192.168.0.1 and MAC address 0001-0001-0001 to form a static IPv4 source guard
binding entry on GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] ip source binding ip-address 192.168.0.1 mac-address
0001-0001-0001
Related commands
display ip source binding
ip verify source
Use ip verify source to enable the IPv4 source guard function.
Use undo ip verify source to restore the default.
Syntax
ip verify source { ip-address | ip-address mac-address | mac-address }
undo ip verify source
Default
The IPv4 source guard function is disabled on an interface.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
To Next Page
Loading...
Need help?
General
