3com S7906E Installationsanweisungen

 

1-3 

z 

Cooperating with DHCP snooping, IP source guard will automatically obtain the DHCP snooping 

entries that are generated during dynamic IP address allocation on a Layer 2 Ethernet port. 

z 

Cooperating with DHCP Relay, IP source guard will automatically obtain the DHCP Relay entries 

that are generated during dynamic IP address allocation across network segments on a VLAN 

interface. 

These dynamically obtained binding entries contain such information as MAC address, IP address, 

VLAN tag, port information and entry type. IP source guard applies these binding entries to the port, so 

that the port can filter packets according to the binding entries. 

Follow these steps to configure port filtering: 

Enter system view 

— 

Enter interface view 

interface interface-type 
interface-number 

— 

Configure dynamic binding 
function 

ip check source { ip-address | 
ip-address mac-address | 
mac-address } 

Required 

Not configured by default 

 

z 

To implement dynamic binding in IP source guard, make sure that DHCP snooping or DHCP Relay 

is configured and works normally. For DHCP configuration information, refer to DHCP 

Configuration in the System Volume. 

z 

A port takes only the latest dynamic binding entries configured on it.  

 

Display information about static 
binding entries 

display user-bind [ interface 
interface-type interface-number 
| ip-address ip-address | 
mac-address mac-address ] 

Available in any view 

Display information about 
dynamic binding entries on a 
distributed device 

display ip check source 
[ interface interface-type 
interface-number | ip-address 
ip-address | mac-address 
mac-address ] [ slot 
slot-number ] 

Available in any view 

Display information about 
dynamic binding entries on a 
distributed IRF device 

display ip check source 
[ interface interface-type 
interface-number | ip-address 
ip-address | mac-address 
mac-address ] [ chassis 
chassis-number slot 
slot-number ] 

Available in any view