H3C S5500-SI Series, Operation Manual

Page: 687 / 1217

1-2
To do… Use the command… Remarks
Configure a static binding entry
user-bind { ip-address ip-address |
ip-address ip-address mac-address
mac-address | mac-address
mac-address } [ vlan vlan-id ]
Required
No static binding entry
exists by default.
z
The system does not support repeatedly binding a binding entry to one port.
z
For products supporting multi-port binding, a binding entry can be configured to multiple ports; for
products that do not support multi-port binding, a binding entry can be configured to only one port.
z
Supported binding entry types vary by device.
z
In a valid binding entry, the MAC address cannot be all 0s, all Fs (a broadcast address), or a
multicast address, and the IP address can only be a Class A, Class B, or Class C address and can
be neither 127.x.x.x nor 0.0.0.0.
z
A static binding entry can be configured on only Layer-2 Ethernet ports.
Configuring Dynamic Binding Function
After the dynamic binding function is enabled on a port, IP source guard will receive and process
corresponding DHCP snooping or DHCP relay entries, which contain such information as MAC address,
IP address, VLAN tag, port information or entry type. It adds the obtained information to the dynamic
binding entries to enable the port to filter packets according to the binding entries.
Follow these steps to configure port filtering:
To do… Use the command… Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—
Configure dynamic binding
function
ip check source { ip-address |
ip-address mac-address |
mac-address }
Required
Not configured by default
z
The dynamic binding function can be configured on Layer-2 Ethernet ports and VLAN interfaces.
z
A port takes only the latest dynamic binding entries configured on it.