Configuring an ike keychain – H3C Technologies H3C S12500-X Series Switches User Manual
Page 224
212
515B
Configuration procedure
1.
Configure Switch A:
# Configure IP addresses for the interfaces. (Details not shown.)
# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/2.
<SwitchA> system-view
[SwitchA] interface ten-gigabitethernet 1/0/2
[SwitchA-Ten-GigabitEthernet1/0/2] ip verify source ip-address mac-address
# On Ten-GigabitEthernet 1/0/2, configure a static IPv4 source guard binding entry for Host C.
[SwitchA-Ten-GigabitEthernet1/0/2] ip source binding ip-address 192.168.0.3
mac-address 0001-0203-0405
[SwitchA-Ten-GigabitEthernet1/0/2] quit
# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/1.
[SwitchA] interface ten-gigabitethernet 1/0/1
[SwitchA-Ten-GigabitEthernet1/0/1] ip verify source ip-address mac-address
# On Ten-GigabitEthernet 1/0/1, configure a static IPv4 source guard binding entry for Host A.
[SwitchA-Ten-GigabitEthernet1/0/1] ip source binding ip-address 192.168.0.1
mac-address 0001-0203-0406
[SwitchA-Ten-GigabitEthernet1/0/1] quit
2.
Configure Switch B:
# Configure an IP address for each interface. (Details not shown.)
# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/2.
<SwitchB> system-view
[SwitchB] interface ten-gigabitethernet 1/0/2
[SwitchB-Ten-GigabitEthernet1/0/2] ip verify source ip-address mac-address
[SwitchB-Ten-GigabitEthernet1/0/2] quit
# Configure a static IPv4 source guard binding entry for Host A.
[SwitchB] ip source binding ip-address 192.168.0.1 mac-address 0001-0203-0406
# Enable IPv4 source guard on Ten-GigabitEthernet 1/0/1.
[SwitchB] interface ten-gigabitethernet 1/0/1
[SwitchB-Ten-GigabitEthernet1/0/1] ip verify source ip-address mac-address
# On Ten-GigabitEthernet 1/0/1, configure a static IPv4 source guard binding entry for Host B.
[SwitchB-Ten-GigabitEthernet1/0/1] ip source binding mac-address 0001-0203-0407
[SwitchB-Ten-GigabitEthernet1/0/1] quit
516B
Verifying the configuration
# Display static IPv4 source guard binding entries on Switch A. The output shows that the static IPv4
source guard binding entries are configured successfully.
<SwitchA> display ip source binding static
Total entries found: 2
IP Address MAC Address Interface VLAN Type
192.168.0.1 0001-0203-0405 XGE1/0/2 N/A Static
192.168.0.3 0001-0203-0406 XGE1/0/1 N/A Static
# Display static IPv4 source guard binding entries on Switch B. The output shows that the static IPv4
source guard binding entries are configured successfully.
<SwitchB> display ip source binding static
Total entries found: 2