beautypg.com

Configuring an ike keychain – H3C Technologies H3C S12500-X Series Switches User Manual

Page 224

background image

212

515B

Configuration procedure

1.

Configure Switch A:
# Configure IP addresses for the interfaces. (Details not shown.)
# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/2.

system-view

[SwitchA] interface ten-gigabitethernet 1/0/2

[SwitchA-Ten-GigabitEthernet1/0/2] ip verify source ip-address mac-address

# On Ten-GigabitEthernet 1/0/2, configure a static IPv4 source guard binding entry for Host C.

[SwitchA-Ten-GigabitEthernet1/0/2] ip source binding ip-address 192.168.0.3

mac-address 0001-0203-0405

[SwitchA-Ten-GigabitEthernet1/0/2] quit

# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/1.

[SwitchA] interface ten-gigabitethernet 1/0/1

[SwitchA-Ten-GigabitEthernet1/0/1] ip verify source ip-address mac-address

# On Ten-GigabitEthernet 1/0/1, configure a static IPv4 source guard binding entry for Host A.

[SwitchA-Ten-GigabitEthernet1/0/1] ip source binding ip-address 192.168.0.1

mac-address 0001-0203-0406

[SwitchA-Ten-GigabitEthernet1/0/1] quit

2.

Configure Switch B:
# Configure an IP address for each interface. (Details not shown.)
# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/2.

system-view

[SwitchB] interface ten-gigabitethernet 1/0/2

[SwitchB-Ten-GigabitEthernet1/0/2] ip verify source ip-address mac-address

[SwitchB-Ten-GigabitEthernet1/0/2] quit

# Configure a static IPv4 source guard binding entry for Host A.

[SwitchB] ip source binding ip-address 192.168.0.1 mac-address 0001-0203-0406

# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/1.

[SwitchB] interface ten-gigabitethernet 1/0/1

[SwitchB-Ten-GigabitEthernet1/0/1] ip verify source ip-address mac-address

# On Ten-GigabitEthernet 1/0/1, configure a static IPv4 source guard binding entry for Host B.

[SwitchB-Ten-GigabitEthernet1/0/1] ip source binding mac-address 0001-0203-0407

[SwitchB-Ten-GigabitEthernet1/0/1] quit

516B

Verifying the configuration

# Display static IPv4 source guard binding entries on Switch A. The output shows that the static IPv4

source guard binding entries are configured successfully.

display ip source binding static

Total entries found: 2

IP Address MAC Address Interface VLAN Type

192.168.0.1 0001-0203-0405 XGE1/0/2 N/A Static

192.168.0.3 0001-0203-0406 XGE1/0/1 N/A Static

# Display static IPv4 source guard binding entries on Switch B. The output shows that the static IPv4
source guard binding entries are configured successfully.

display ip source binding static

Total entries found: 2