355
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Configure a global static IPv4
binding entry.
ip source binding ip-address
ip-address
mac-address
mac-address
No global static IPv4 binding entry
is configured by default.
Configuring port-based static IPv4 binding entries
When you configure port-based static IPv4 source guard entries, follow these guidelines:
•
You cannot repeatedly configure the same static binding entry on one port, but you can configure
the same static entry on different ports.
•
IP source guard does not use the VLAN information (if specified) in static IPv4 binding entries to
filter packets.
•
When the ARP detection function is configured, be sure to specify the VLAN where ARP detection
is configured in static IPv4 binding entries. Otherwise, ARP packets are discarded because they
cannot match any static IPv4 binding entry.
•
If a static binding entry to be added denotes the same binding as an existing dynamic binding entry,
the new static binding entry overwrites the dynamic binding entry.
To configure a static IPv4 binding entry on a port:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter Layer 2 interface view.
interface
interface-type
interface-number
N/A
3.
Configure a static IPv4 source
guard entry on the port.
ip source binding
{
ip-address
ip-address
|
ip-address
ip-address
mac-address
mac-address
|
mac-address
mac-address
} [
vlan
vlan-id
]
By default, no static IPv4 binding
entry is configured on a port.
Setting the maximum number of IPv4 source guard binding
entries
The maximum number of IPv4 source guard entries is used to limit the total number of static and dynamic
IPv4 source guard entries on a port. When the number of IPv4 binding entries on a port reaches the
maximum, the port does not allowed new IPv4 binding entries any more.
If the maximum number of IPv4 binding entries to be configured is smaller than the number of existing
IPv4 binding entries on the port, the maximum number can be configured successfully, and the existing
entries are not affected. New IPv4 binding entries, however, cannot be added until the number of IPv4
binding entries on the port drops below the configured maximum.
To configure the maximum number of IPv4 binding entries allowed on a port:
Step Command
Remarks
1.
Enter system view.
system-view
N/A