3Com S7906E - Switch, Руководство по настройке

Страница: 1974 / 2621

1-2
z
A dynamic binding is implemented in cooperation with DHCP snooping or DHCP Relay. It is
suitable when there are many hosts in a LAN, and DHCP is used to allocate IP addresses to the
hosts. Once DHCP allocates an IP address for a user, the IP source guard function will
automatically add a binding entry based on the DHCP entry to allow the user to access the network.
If a user specifies an IP address instead of getting one through DHCP, the user will not trigger
DHCP to allocate an IP address, and therefore no IP source guard binding will be added for the
user to access the network. In this way, IP address collision and theft are prevented.
You cannot configure the IP source guard function on a port in a service loopback group or an
aggregation group, nor can you add a port configured with IP source guard to an aggregation group or
a service loopback group.
Configuring a Static Binding Entry
Follow these steps to configure a static binding entry:
To do… Use the command… Remarks
Enter system view
system-view
—
Enter interface view
interface interface-type
interface-number
—
Configure a static binding entry
user-bind { ip-address
ip-address |
ip-address ip-address
mac-address mac-address |
mac-address mac-address }
[ vlan vlan-id ]
Required
No static binding entry exists by
default.
z
The system does not support repeatedly binding a binding entry to one port.
z
A binding entry can be configured to multiple ports.
z
In a valid binding entry, the MAC address cannot be all 0s, all Fs (a broadcast address), or a
multicast address, and the IP address can only be a Class A, Class B, or Class C address and can
be neither 127.x.x.x nor 0.0.0.0.
z
A static binding entry can be configured on only Layer-2 Ethernet ports.
Configuring the Dynamic Binding Function
After the dynamic binding function is enabled on a port, IP source guard will obtain binding entries
through cooperation with DHCP protocols.