HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

410
[DeviceA] interface ethernet 1/2
[DeviceA-Ethernet1/2] ip verify source ip-address mac-address
# Configure Ethernet 1/2 to allow only IP packets with the source MAC address of
0001-0203-0405 and the source IP address of 192.168.0.3 to pass.
[DeviceA] interface ethernet 1/2
[DeviceA-Ethernet1/2] ip source binding ip-address 192.168.0.3 mac-address
0001-0203-0405
[DeviceA-Ethernet1/2] quit
# Enable IPv4 source guard on Ethernet 1/1 to filter packets based on both the source IP
address and MAC address.
[DeviceA] interface ethernet 1/1
[DeviceA-Ethernet1/1] ip verify source ip-address mac-address
# Configure Ethernet 1/1 to allow only IP packets with the source MAC address of
0001-0203-0406 and the source IP address of 192.168.0.1 to pass.
[DeviceA-Ethernet1/1] ip source binding ip-address 192.168.0.1 mac-address
0001-0203-0406
[DeviceA-Ethernet1/1] quit
2. Configure Device B:
# Enable IPv4 source guard on Ethernet 1/2 to filter packets based on both the source IP
address and MAC address.
<DeviceB> system-view
[DeviceB] interface ethernet 1/2
[DeviceB-Ethernet1/2] ip verify source ip-address mac-address
# Configure Ethernet 1/2 to allow only IP packets with the source MAC address of
0001-0203-0406 and the source IP address of 192.168.0.1 to pass.
[DeviceB] interface ethernet 1/2
[DeviceB-Ethernet1/2] ip source binding ip-address 192.168.0.1 mac-address
0001-0203-0406
[DeviceB-Ethernet1/2] quit
# Enable IPv4 source guard on Ethernet 1/1 to filter packets based on the source IP address.
[DeviceB] interface ethernet 1/1
[DeviceB-Ethernet1/1] ip verify source ip-address
# Configure Ethernet 1/1 to allow only IP packets with the source IP address of 192.168.0.2 to
pass.
[DeviceB-Ethernet1/1] ip source binding ip-address 192.168.0.2
[DeviceB-Ethernet1/1] quit
Verifying the configuration
# On Device A, display information about static IPv4 source guard binding entries. The output shows
that the static IPv4 source guard binding entries are configured successfully.
[DeviceA] display ip source binding static
Total entries found: 2
MAC Address IP Address VLAN Interface Type
0001-0203-0405 192.168.0.3 N/A Eth1/2 Static
0001-0203-0406 192.168.0.1 N/A Eth1/1 Static
# On Device B, display information about static IPv4 source guard binding entries. The output shows
that the static IPv4 source guard binding entries are configured successfully.
[DeviceB] display ip source binding static
Total entries found: 2
MAC Address IP Address VLAN Interface Type

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English