H3C Technologies H3C WX6000 Series Access Controllers - Manual (Page 288)

26-2
Configuring a Static Binding Entry
Follow these steps to configure a static binding entry:
To do… Use the command… Remarks
Enter system view system-view —
Enter interface view interface interface-type interface-number —
Configure a static binding entry
user-bind { ip-address ip-address | ip-address
ip-address mac-address mac-address |
mac-address mac-address }
Required
No static binding entry
exists by default.
z
The system does not support repeatedly configuring a binding entry to one port. A binding entry
can be configured to multiple ports.
z
In a valid binding entry, the MAC address cannot be all 0s, all Fs (a broadcast address), or a
multicast address, and the IP address can only be a Class A, Class B, or Class C address and can
be neither 127.x.x.x nor 0.0.0.0.
Configuring Dynamic Binding Function
After the dynamic binding function is enabled on a port, IP source guard will receive and process
corresponding DHCP Snooping entries, which contain such information as MAC address, IP address,
VLAN tag, port information or entry type. It adds the obtained information to the dynamic binding entries
to enable the port to filter packets according to the binding entries.
Follow these steps to configure dynamic binding function:
To do… Use the command… Remarks
Enter system view system-view —
Enter interface view interface interface-type interface-number —
Configure dynamic binding
function ip check source { ip-address | ip-address
mac-address | mac-address }
Required
Not configured by default
Displaying IP Source Guard
To do… Use the command… Remarks
Display information about
static binding entries
display user-bind [ interface interface-type
interface-number | ip-address ip-address |
mac-address mac-address ]
Available in any view
Display information about
dynamic binding entries
display ip check source [ interface interface-type
interface-number | ip-address ip-address |
mac-address mac-address ]
Available in any view