Operation Manual – Port Security-Port Binding
H3C S5100-SI/EI Series Ethernet Switches
Chapter 1 Port Security Configuration
2-1
Chapter 2 Port Binding Configuration
When configuring port binding, go to these sections for information you are interested
in:
z
Port Binding Overview
z
Displaying and Maintaining Port Binding Configuration
z
Port Binding Configuration Example
2.1 Port Binding Overview
2.1.1 Introduction
Port binding enables the network administrator to bind the MAC address and IP
address of a user to a specific port. After the binding, the switch forwards only the
packets received on the port whose MAC address and IP address are identical with the
bound MAC address and IP address. This improves network security and enhances
security monitoring.
2.1.2 Configuring Port Binding
Follow these steps to configure port binding:
To do...
Use the command...
Remarks
Enter system view
system-view
—
In system
view
am user-bind mac-addr
mac-address ip-addr ip-address
interface interface-type
interface-number
interface
interface-type
interface-number
Bind the
MAC
address
and IP
address of
a user to a
specific
port
In Ethernet
port view
am user-bind mac-addr
mac-address ip-addr ip-address
Either is required.
By default, no
user MAC
address or IP
address is bound
to a port.
Note:
z
An IP address can be bound to only one port at a time.
z
A MAC address can be bound to only one port at a time.
