Operation Manual – Port Security-Port BindingH3C S5100-SI/EI Series Ethernet Switches Chapter 1 Port Security Configuration2-1Chapter 2 Port Binding ConfigurationWhen configuring port binding, go to these sections for information you are interestedin:z Port Binding Overviewz Displaying and Maintaining Port Binding Configurationz Port Binding Configuration Example2.1 Port Binding Overview2.1.1 IntroductionPort binding enables the network administrator to bind the MAC address and IPaddress of a user to a specific port. After the binding, the switch forwards only thepackets received on the port whose MAC address and IP address are identical with thebound MAC address and IP address. This improves network security and enhancessecurity monitoring.2.1.2 Configuring Port BindingFollow these steps to configure port binding:To do... Use the command... RemarksEnter system view system-view —In systemviewam user-bind mac-addrmac-address ip-addr ip-addressinterface interface-typeinterface-numberinterface interface-typeinterface-numberBind theMACaddressand IPaddress ofa user to aspecificportIn Ethernetport view am user-bind mac-addrmac-address ip-addr ip-addressEither is required.By default, nouser MACaddress or IPaddress is boundto a port.Note:z An IP address can be bound to only one port at a time.z A MAC address can be bound to only one port at a time.
