3Com S7902E, Configuration Manual

Page: 1981 / 2621

1-9
Configuration procedure
1) Configure Switch A
# Configure the IP addresses of the interfaces (omitted).
# Configure dynamic binding function on VLAN-interface 100 to filter packets based on both the source
IP address and MAC address.
<SwitchA> system-view
[SwitchA] vlan 100
[SwitchA-Vlan100] quit
[SwitchA] interface vlan-interface 100
[SwitchA-Vlan-interface100] ip check source ip-address mac-address
[SwitchA-Vlan-interface100] quit
# Enable DHCP Relay.
[SwitchA] dhcp enable
# Configure the IP address of the DHCP server.
[SwitchA] dhcp relay server-group 1 ip 10.1.1.1
# Configure VLAN-interface 100 to work in DHCP relay mode.
[SwitchA] interface vlan-interface 100
[SwitchA-Vlan-interface100] dhcp select relay
# Correlate VLAN-interface 100 with DHCP server group 1.
[SwitchA-Vlan-interface100] dhcp relay server-select 1
2) Verify the configuration
# Display the generated dynamic binding entries.
[SwitchA] display ip check source
Total entries found: 1
MAC IP Vlan Port Status
0001-0203-0406 192.168.0.1 100 Vlan-interface100 DHCP-RLY
Troubleshooting IP Source Guard
Failed to Configure Static Binding Entries and Dynamic Binding Function
Symptom
Configuring static binding entries and dynamic binding function fails on a port.
Analysis
IP Source Guard is not supported on the port which has joined an aggregation group. Neither static
binding entries nor dynamic binding function can be configured on the port which has joined an
aggregation group.
Solution
Remove the port from the aggregation group.