H3C Technologies H3C S6300 Series Switches - Manual (Page 331)

316
Displaying and maintaining IP source guard
Execute display commands in any view and reset commands in user view.
For IPv4 source guard:
Task Command
Display IPv4 source guard
binding entries.
display ip source binding [ static | [ dhcp-relay | dhcp-server | dhcp-snooping
| dot1x ] ] [ ip-address ip-address ] [ mac-address mac-address ] [ vlan vlan-id ]
[ interface interface-type interface-number ] [ slot slot-number ]
For IPv6 source guard:
Task Command
Display IPv6 source guard
binding entries.
display ipv6 source binding [ static | [ dhcpv6-snooping ] ] [ ip-address
ipv6-address ] [ mac-address mac-address ] [ vlan vlan-id ] [ interface
interface-type interface-number ] [ slot slot-number ]
IP source guard configuration examples
Static IPv4 source guard configuration example
Network requirements
As shown in Figure 102 , all hosts use static IP addresses.
Configure static IPv4 source guard binding entries on Switch A and Switch B to meet the following
requirements:
• Ten-GigabitEthernet 1/0/2 of Switch A allows only IP packets from Host C to pass.
• Ten-GigabitEthernet 1/0/1 of Switch A allows only IP packets from Host A to pass.
• All interfaces of Switch B allow IP packets from Host A to pass.
• Ten-GigabitEthernet 1/0/1 of Switch B allows IP packets from Host B to pass.
Figure 102 Network diagram