3-12Figure 3-7 Network diagram for IP filtering configurationSwitchDHCP SnoopingGE1/0/2Client CGE1/0/1DHCP ServerClient BHost AIP:1.1.1.1MAC:0001-0001-0001GE1/0/3GE1/0/4Configuration procedure# Enable DHCP snooping on Switch. system-view[Switch] dhcp-snooping# Specify GigabitEthernet 1/0/1 as the trusted port.[Switch] interface gigabitethernet 1/0/1[Switch-GigabitEthernet1/0/1] dhcp-snooping trust[Switch-GigabitEthernet1/0/1] quit# Enable IP filtering on GigabitEthernet 1/0/2, GigabitEthernet 1/0/3, and GigabitEthernet 1/0/4 to filterpackets based on the source IP addresses/MAC addresses.[Switch] interface gigabitethernet 1/0/2[Switch-GigabitEthernet1/0/2] ip check source ip-address mac-address[Switch-GigabitEthernet1/0/2] quit[Switch] interface gigabitethernet 1/0/3[Switch-GigabitEthernet1/0/3] ip check source ip-address mac-address[Switch-GigabitEthernet1/0/3] quit[Switch] interface gigabitethernet 1/0/4[Switch-GigabitEthernet1/0/4] ip check source ip-address mac-address[Switch-GigabitEthernet1/0/4] quit# Create static binding entries on GigabitEthernet 1/0/2 of Switch.[Switch] interface gigabitethernet 1/0/2[Switch-GigabitEthernet1/0/2] ip source static binding ip-address 1.1.1.1 mac-address0001-0001-0001
