Configuring an ike keychain – H3C Technologies H3C S12500-X Series Switches User Manual
Page 224
212
515B
Configuration procedure
1.
Configure Switch A:
# Configure IP addresses for the interfaces. (Details not shown.)
# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/2.
[SwitchA] interface ten-gigabitethernet 1/0/2
[SwitchA-Ten-GigabitEthernet1/0/2] ip verify source ip-address mac-address
# On Ten-GigabitEthernet 1/0/2, configure a static IPv4 source guard binding entry for Host C.
[SwitchA-Ten-GigabitEthernet1/0/2] ip source binding ip-address 192.168.0.3
mac-address 0001-0203-0405
[SwitchA-Ten-GigabitEthernet1/0/2] quit
# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/1.
[SwitchA] interface ten-gigabitethernet 1/0/1
[SwitchA-Ten-GigabitEthernet1/0/1] ip verify source ip-address mac-address
# On Ten-GigabitEthernet 1/0/1, configure a static IPv4 source guard binding entry for Host A.
[SwitchA-Ten-GigabitEthernet1/0/1] ip source binding ip-address 192.168.0.1
mac-address 0001-0203-0406
[SwitchA-Ten-GigabitEthernet1/0/1] quit
2.
Configure Switch B:
# Configure an IP address for each interface. (Details not shown.)
# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/2.
[SwitchB] interface ten-gigabitethernet 1/0/2
[SwitchB-Ten-GigabitEthernet1/0/2] ip verify source ip-address mac-address
[SwitchB-Ten-GigabitEthernet1/0/2] quit
# Configure a static IPv4 source guard binding entry for Host A.
[SwitchB] ip source binding ip-address 192.168.0.1 mac-address 0001-0203-0406
# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/1.
[SwitchB] interface ten-gigabitethernet 1/0/1
[SwitchB-Ten-GigabitEthernet1/0/1] ip verify source ip-address mac-address
# On Ten-GigabitEthernet 1/0/1, configure a static IPv4 source guard binding entry for Host B.
[SwitchB-Ten-GigabitEthernet1/0/1] ip source binding mac-address 0001-0203-0407
[SwitchB-Ten-GigabitEthernet1/0/1] quit
516B
Verifying the configuration
# Display static IPv4 source guard binding entries on Switch A. The output shows that the static IPv4
source guard binding entries are configured successfully.
Total entries found: 2
IP Address MAC Address Interface VLAN Type
192.168.0.1 0001-0203-0405 XGE1/0/2 N/A Static
192.168.0.3 0001-0203-0406 XGE1/0/1 N/A Static
# Display static IPv4 source guard binding entries on Switch B. The output shows that the static IPv4
source guard binding entries are configured successfully.
Total entries found: 2
- H3C S5560 Series Switches H3C WX6000 Series Access Controllers H3C WX5000 Series Access Controllers H3C WX3000 Series Unified Switches H3C LSWM1WCM10 Access Controller Module H3C LSWM1WCM20 Access Controller Module H3C LSQM1WCMB0 Access Controller Module H3C LSRM1WCM2A1 Access Controller Module H3C LSBM1WCM2A0 Access Controller Module H3C S9800 Series Switches H3C S5130 Series Switches H3C S5120 Series Switches