Operation Manual – MAC-IP-Port Binding
H3C S3610&S5510 Series Ethernet Switches
Chapter 1 MAC-IP-Port Binding Configuration
1-3
II. Network Diagram
PC
PC
PC
LSA
LSB
DT3
MAC 0
IP 192
to inte
DT2
MAC 00-01-02-03-04-
IP 192.168.0.2
to interface Ethernet
DT1
MAC 00-01-02-03-04-06
IP 192.168.0.1
to interface Ethernet1/0/4
Ethernet1/0/4
Ethernet1/0/5
Ethernet1/0/5
Ethernet1/0/4
0-01-02-03-04-05
.168.0.3
rface Ethernet1/0/4
07
1/0/5
PC
PC
PC
LSA
LSB
DT3
MAC 0
IP 192
to inte
DT2
MAC 00-01-02-03-04-
IP 192.168.0.2
to interface Ethernet
DT1
MAC 00-01-02-03-04-06
IP 192.168.0.1
to interface Ethernet1/0/4
Ethernet1/0/4
Ethernet1/0/5
Ethernet1/0/5
Ethernet1/0/4
0-01-02-03-04-05
.168.0.3
rface Ethernet1/0/4
07
1/0/5
PC
PC
PC
LSA
LSB
DT3
MAC 0
IP 192
to inte
DT2
MAC 00-01-02-03-04-
IP 192.168.0.2
to interface Ethernet
DT1
MAC 00-01-02-03-04-06
IP 192.168.0.1
to interface Ethernet1/0/4
Ethernet1/0/4
Ethernet1/0/5
Ethernet1/0/5
Ethernet1/0/4
0-01-02-03-04-05
.168.0.3
rface Ethernet1/0/4
07
1/0/5
g
Figure 1-1
Network diagram for MAC-IP-port bindin
III. Configuration Procedure
1) Configure
LSA
# Configure port Ethernet 1/0/4 of LSA to allow only IP packets with the source MAC
address of 00-01-02-03-04-05 and the source IP address of 192.168.0.3 to pass.
<Sysname> system-view
[Sysname] interface ethernet 1/0/4
[Sysname-Ethernet1/0/4] user-bind mac-addr 0001-0203-0405 ip-addr
192.168.0.3
[Sysname-Ethernet1/0/4] quit
# Configure port Ethernet 1/0/5 of LSA to allow only IP packets with the source MAC
address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass.
[Sysname] interface ethernet 1/0/5
[Sysname-Ethernet1/0/5] user-bind mac-addr 0001-0203-0406 ip-addr
192.168.0.1
2) Configure
LSB
# Configure port Ethernet 1/0/4 of LSB to allow only IP packets with the source MAC
address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass.
<Sysname> system-view
[Sysname] user-bind mac-addr 0001-0203-0406 ip-addr 192.168.0.1 interface
ethernet 1/0/4
# Configure port Ethernet1/0/5 of LSB to allow only IP packets with the source MAC
address of 00-01-02-03-04-07 and the source IP address of 192.168.0.2 to pass.
