filtering on an interface. The interface filters packets according to the static IPv4 source guard entries
configured by the ip source binding command, instead of the keywords specified in the ip verify source
command.
Examples
# Enable IPv4 source guard on Ethernet port Ten-GigabitEthernet 1/0/1 to filter packets received on the
port based on the source IPv4 and MAC addresses.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] ip verify source ip-address mac-address
# Enable IPv4 source guard on VLAN-interface 100 to filter packets received on the interface based on
the source IPv4 and MAC addresses.
<Sysname> system-view
[Sysname] interface vlan-interface 100
[Sysname-Vlan-interface100] ip verify source ip-address mac-address
Related commands
display ip source binding
ipv6 source binding
Use ipv6 source binding to configure a static IPv6 source guard entry.
Use undo ipv6 source binding to delete the static IPv6 source guard entries configured on the interface.
Syntax
ipv6 source binding ip-address ipv6-address [ mac-address mac-address ] [ vlan vlan-id ]
undo ipv6 source binding ip-address ipv6-address [ mac-address mac-address ] [ vlan vlan-id ]
Default
No static IPv6 source guard entry is configured on an interface.
Views
Ethernet interface view, VLAN interface view
Predefined user roles
network-admin
Parameters
ip-address ipv6-address: Specifies an IPv6 address for the static entry. The IPv6 address cannot be an
all-zero address, a multicast address, or a loopback address.
mac-address mac-address: Specifies a MAC address for the static entry. The MAC address must be in
H-H-H format, and cannot be all 0s, all Fs (a broadcast address), or a multicast address.
vlan vlan-id: Specifies a VLAN ID for the static entry. The vlan-id argument ranges from 1 to 4094.
285
To Next Page
Loading...
Need help?
General
