Configure Static Bound Entries of Port IP Source Guard
Configuration Condition
Before configuring the static bound entries of the port IP Source Guard, first complete the following task:
- Enable the port IP Source Guard function or enable the port Dynamic ARP Inspection function
Configure Static Bound Entries of Port IP Source Guard
The static bound entries of the port IP Source Guard are the basis of filtering the IP packets received by the specified port.
When the port Dynamic ARP Inspection function is enabled, only the static entries configured with mac, ip, and vlan can serve as the basis of the validity detection for the ARP packets.
Table 4-2 Configure the static bound entries of the port IP Source Guard
|
Step
|
Command
|
Description
|
|
Enter global configuration mode
|
config terminal
|
-
|
|
Enter the L2 Ethernet interface configuration mode
|
interface interface-name
|
Either
After entering the L2 Ethernet interface configuration mode, the subsequent configuration just takes effect on the current port. After entering the aggregation group configuration mode, the subsequent configuration just takes effect on the aggregation group.
|
|
Enter the aggregation group configuration mode
|
interface link-aggregation link-aggregation-id
|
|
Configure the static bound entries of the port IP Source Guard
|
ip source binding { ip-address ip-address [ mac-address mac-address [ vlan vlan-id ] | vlan vlan-id ] | mac-address mac-address [ vlan vlan-id ] }
|
Mandatory
By default, there is no static bound entry of the port IP Source Guard.
|
-
For the port Dynamic ARP Inspection function, refer to the Dynamic ARP Inspection chapter of the configuration manual.
Switch
.png){kind=icon}
.png){kind=logo}
