Инструкции По Установке для 3com S7906E

 

1-2 

z 

A dynamic binding is implemented in cooperation with DHCP snooping or DHCP Relay. It is 

suitable when there are many hosts in a LAN, and DHCP is used to allocate IP addresses to the 

hosts. Once DHCP allocates an IP address for a user, the IP source guard function will 

automatically add a binding entry based on the DHCP entry to allow the user to access the network. 

If a user specifies an IP address instead of getting one through DHCP, the user will not trigger 

DHCP to allocate an IP address, and therefore no IP source guard binding will be added for the 

user to access the network. In this way, IP address collision and theft are prevented.  

 

You cannot configure the IP source guard function on a port in a service loopback group or an 

aggregation group, nor can you add a port configured with IP source guard to an aggregation group or 

a service loopback group. 

 

Follow these steps to configure a static binding entry: 

Enter system view

 

—

 

Enter interface view 

interface interface-type 
interface-number

— 

Configure a static binding entry 

user-bind { ip-address 
ip-address | 

 ip-address ip-address 
mac-address mac-address | 
mac-address mac-address } 
[ vlan vlan-id ]

Required 

No static binding entry exists by 
default. 

 

z 

The system does not support repeatedly binding a binding entry to one port.  

z 

A binding entry can be configured to multiple ports.  

z 

In a valid binding entry, the MAC address cannot be all 0s, all Fs (a broadcast address), or a 

multicast address, and the IP address can only be a Class A, Class B, or Class C address and can 

be neither 127.x.x.x nor 0.0.0.0. 

z 

A static binding entry can be configured on only Layer-2 Ethernet ports.  

 

After the dynamic binding function is enabled on a port, IP source guard will obtain binding entries 

through cooperation with DHCP protocols.