354
Step Command
Remarks
3.
Enter interface view.
interface
interface-type
interface-number
The term "interface" collectively
refers to the following types of
ports and interfaces: Bridge mode
(Layer 2) Ethernet ports, VLAN
interfaces, and port groups.
4.
Enable 802.1X on the port.
dot1x
Optional.
By default, 802.1X is disabled on
the port.
5.
Enable the 802.1X IP freezing
function.
dot1x user-ip freeze
Optional.
By default, this function is
disabled. A port saves the IP
addresses of 802.1X users and
updates the IP addresses if 802.1X
users change their IP addresses.
This command is available only in
Release 5206 and later.
6.
Enable the port to generate
802.1X-based dynamic IPv4
source guard binding entries.
ip verify source dot1x
Optional.
By default, a port does not
generate 802.1X-based dynamic
IPv4 source guard binding entries.
This command is available only in
Release 5206 and later.
7.
Configure IPv4 source guard
on the port.
ip verify source
{
ip-address
|
ip-address
mac-address
|
mac-address
}
Not configured by default.
NOTE:
Although dynamic IPv4 source guard entries are generated based on DHCP entries, the number of
dynamic IPv4 source guard entries is not necessarily the same as that of the DHCP entries.
Configuring a static IPv4 source guard entry
Static IPv4 binding entries take effect on only the ports configured with the IPv4 source guard function
(see "
Configuring IPv4 source guard on a port
").
Port-based static IPv4 source guard entries and dynamic IPv4 source guard entries take precedence over
global static IPv4 source guard entries. A port matches a packet against global static binding entries only
when the packet does not match any port-based static binding entry or dynamic binding entry on the
port.
Configuring global static IPv4 binding entries
A global static binding entry defines the IP address and MAC address of the packets that can be
forwarded by ports. It takes effect on all ports of the device.
To configure a global static IPv4 binding entry:
