H3C Technologies H3C S5120 Series Switches - Manual (Page 727)

1-2
To do… Use the command… Remarks
Configure a static binding entry
user-bind { ip-address
ip-address |
ip-address ip-address
mac-address mac-address |
mac-address mac-address }
[ vlan vlan-id ]
Required
No static binding entry exists by
default.
z The system does not support repeatedly binding a binding entry to one port.
z A binding entry can be configured to multiple ports.
z In a valid binding entry, the MAC address cannot be all 0s, all Fs (a broadcast address), or a
multicast address, and the IP address can only be a Class A, Class B, or Class C address and can
be neither 127.x.x.x nor 0.0.0.0.
z A static binding entry can be configured on only Layer-2 Ethernet ports.
Configuring Dynamic Binding Function
After the dynamic binding function is enabled on a port, IP source guard will receive and process
corresponding DHCP snooping entries, which contain such information as MAC address, IP address,
VLAN tag, port information or entry type. It adds the obtained information to the dynamic binding entries
to enable the port to filter packets according to the binding entries.
Follow these steps to configure port filtering:
To do… Use the command… Remarks
Enter system view system-view —
Enter interface view
interface interface-type
interface-number
—
Configure dynamic binding
function
ip check source { ip-address |
ip-address mac-address |
mac-address }
Required
Not configured by default
A port takes only the latest dynamic binding entries configured on it.