Configuring a static IPv4 source guard binding entry
Static IPv4 binding entries take effect on an interface only when the interface is configured with the IPv4 source guard feature (see "Configuring IPv4 source guard on an interface").
You can configure global static and interface-specific static IPv4 source guard binding entries. Global static binding entries take effect on all interfaces configured with the IPv4 source guard feature.
Interface-specific static binding entries take priority over global static binding entries. An interface first uses the static binding entries on the interface to match packets. If no match is found, the interface uses the global binding entries.
Configuring a global static IPv4 source guard binding entry
Step | Command | Remarks |
|---|---|---|
2. Configure a global static IPv4 source guard binding entry. | ip source binding ip-address ip-address mac-address mac-address | By default, no global static IPv4 binding entry exists. |
1. Enter system view. | system-view | N/A |
Configuring a static IPv4 source guard binding entry on an interface
When you configure a static IPv4 source guard binding entry on an interface, follow these guidelines:
You cannot repeatedly configure the same static binding entry on one interface, but you can configure the same static entry on different interfaces.
IP source guard does not use the VLAN information (if specified) in static IPv4 binding entries to filter packets.
When the ARP detection feature is configured, be sure to specify the VLAN where ARP detection is configured in static IPv4 binding entries. Otherwise, ARP packets are discarded because they cannot match any static IPv4 binding entry.
If a static binding entry to be added denotes the same binding as an existing dynamic binding entry, the new static binding entry overwrites the dynamic binding entry.
To configure a static IPv4 binding entry on an interface:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter Layer 2 interface view. | interface interface-type interface-number | N/A |
3. Configure a static IPv4 source guard binding entry on the interface. | ip source binding { ip-address ip-address | ip-address ip-address mac-address mac-address | mac-address mac-address } [ vlan vlan-id ] | By default, no static IPv4 binding entry is configured on an interface. |