2 port binding configuration, Port binding overview, Introduction – H3C Technologies H3C S3100 Series Switches User Manual
Page 186: Port binding configuration
2-1
2
Port Binding Configuration
When configuring port binding, go to these sections for information you are interested in:
z
z
Displaying and Maintaining Port Binding Configuration
z
Port Binding Configuration Example
Currently, only the S3100-EI series support port binding.
Port Binding Overview
Introduction
Binding is a simple security mechanism. Through the binding configuration on the switch, you can filter
the packets forwarded on the ports. When a port receives a packet, it searches the binding entry. If the
information carried in the packet matches the information in the binding entry, the port forwards the
packet. Otherwise, the port discards the packet.
Currently, the switch provides the following binding policies:
z
Port-IP binding: binds a port to an IP address. On the bound port, the switch forwards only the
packets sourced from the bound IP address.
z
Port-MAC binding: binds a port to a MAC address. On the bound port, the switch forwards only the
packets sourced from the bound MAC address.
z
Port-MAC-IP binding: binds a MAC address and an IP address to a port. On the port, if the source
IP address of a received packet matches a binding entry, the port forwards the packet only if the
source MAC address of the packet also matches the entry. If the source IP address of a packet
does not match any entry in the port-MAC-IP binding table, the port forwards the packet.
z
IP-MAC binding: binds an IP address to a MAC address. The switch forwards only the packets
sourced from the bound source MAC address and source IP address.
When a port is bound, the binding applies only to the port.