H3C Technologies H3C S6300 Series Switches - Manual (Page 329)

314
A global static binding entry defines both the source IP address and source MAC address of packets that
can be forwarded. It takes effect on all interfaces.
Interface-specific static binding entries take priority over global static binding entries. An interface first
compares an incoming packet with the static binding entries configured on the interface. If no match is
found, the interface uses the global entries.
Configuring a global static IPv4 source guard binding entry
Step Command Remarks
1. Enter system view. system-view N/A
2. Configure a global
static IPv4 source
guard binding entry.
ip source binding ip-address ip-address
mac-address mac-address
No global static IPv4
source guard binding
entry exists.
Configuring a static IPv4 source guard binding entry on an interface
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number Layer 2 Ethernet ports and VLAN interfaces
are supported.
3. Configure a static IPv4
source guard binding
entry.
ip source binding { ip-address
ip-address | ip-address
ip-address mac-address
mac-address | mac-address
mac-address } [ vlan vlan-id ]
By default, no static IPv4 source guard
binding entry is configured on an interface.
The vlan vlan-id option is supported only in
Layer 2 Ethernet interface view.
To configure a static binding entry for the
ARP detection function, the vlan vlan-id
option must be specified, and ARP detection
must be enabled for the specified VLAN.
You can configure the same static IPv4
source guard binding entry on different
interfaces.
Configuring the IPv6 source guard feature
Enabling IPv6 source guard on an interface
You must first enable the IPv6 source guard feature on an interface for the IP source guard to take effect.
All matching criteria in a static IPv6 source guard binding entry are used by IP source guard to filter
packets. For information about static IPv6 binding entry configuration, see " Configuring a static IPv6
source guard binding entry ."
A dynamic IPv6 source guard binding entry can include MAC address, IPv6 address, VLAN tag, ingress
interface, and entry type. The entry type identifies the source module for the binding entry, such as
DHCPv6 snooping. Dynamic IPv6 source guard uses the entries to filter incoming IPv6 packets based on
the matching criteria specified in the ipv6 verify source command. If a match is found, packets are
forwarded.