H3C Technologies H3C WX3000 Series Unified Switches - Manual (Page 152)

19-1
19
Port Binding Configuration
Port Binding Overview
Introduction
Port binding enables the network administrator to bind the MAC address and IP address of a user to a
specific port. After the binding, the switch forwards only the packets received on the port whose MAC
address and IP address are identical with the bound MAC address and IP address. This improves
network security and enhances security monitoring.
Configuring Port Binding
Follow these steps to configure port binding:
To do… Use the command… Remarks
Enter system view system-view —
In system view
am user-bind mac-addr mac-address ip-addr
ip-address interface interface-type
interface-number
interface interface-type interface-number
Bind the MAC
address and IP
address of a
user to a
specific port
In Ethernet
port view
am user-bind mac-addr mac-address ip-addr
ip-address
User either approach.
By default, no user
MAC address or IP
address is bound to a
port.
z
An IP address can be bound to only one port at a time.
z
A MAC address can be bound to only one port at a time.
Displaying and Maintaining Port Binding Configuration
To do… Use the command… Remarks
Display port binding
information
display am user-bind [ interface
interface-type interface-number | ip-addr
ip-addr | mac-addr mac-addr ]
Available in any view