1-2Configuring a Static Binding EntryFollow these steps to configure a static binding entry:To do… Use the command… RemarksEnter system view system-view —Enter Ethernet port view interface interface-type interface-number —Configure a static binding entryuser-bind { ip-address ip-address |ip-address ip-address mac-addressmac-address | mac-address mac-address }[ vlan vlan-id ]RequiredNo static binding entryexists by default.z The system does not support repeatedly binding a binding entry to one port, but a binding entry canbe configured to multiple ports.z In a valid binding entry, the MAC address cannot be all 0s, all Fs (a broadcast address), or amulticast address, and the IP address can only be a Class A, Class B, or Class C address and canbe neither 127.x.x.x nor 0.0.0.0.z A static binding entry can be configured on only Ethernet ports.Configuring Dynamic Binding FunctionAfter the dynamic binding function is enabled on a port, IP source guard will obtain binding entriesthrough cooperation with DHCP protocols.z Cooperating with DHCP snooping, IP source guard will automatically obtain the DHCP snoopingentries that are generated during dynamic IP address allocation on an Ethernet port.z Cooperating with DHCP Relay, IP source guard will automatically obtain the DHCP Relay entriesthat are generated during dynamic IP address allocation across network segments on a VLANinterface.These dynamically obtained binding entries contain such information as MAC address, IP address,VLAN tag, port information and entry type. IP source guard applies these binding entries to the port, sothat the port can filter packets according to the binding entries.Follow these steps to configure port filtering:To do… Use the command… RemarksEnter system view system-view —Enter interface view interface interface-typeinterface-number —Configure dynamic bindingfunctionip check source { ip-address |ip-address mac-address |mac-address }RequiredNot configured by default
