1-3z To implement dynamic binding in IP source guard, make sure that DHCP snooping or DHCP Relayis configured and works normally. For DHCP configuration information, refer to DHCPConfiguration in the System Volume.z The dynamic binding function can be configured on Ethernet ports and VLAN interfaces.z A port takes only the latest dynamic binding entries configured on it.Displaying and Maintaining IP Source GuardTo do… Use the command… RemarksDisplay information about staticbinding entriesdisplay user-bind [ interface interface-typeinterface-number | ip-address ip-address |mac-address mac-address ]Available in any viewDisplay information about dynamicbinding entriesdisplay ip check source [ interfaceinterface-type interface-number | ip-addressip-address | mac-address mac-address ]Available in any viewIP Source Guard Configuration ExamplesStatic Binding Entry Configuration ExampleNetwork requirementsAs shown in Figure 1-1, Host A and Host B are connected to ports GigabitEthernet 1/0/2 andGigabitEthernet 1/0/1 of Switch B respectively, Host C is connected to port GigabitEthernet 1/0/2 ofSwitch A, and Switch B is connected to port GigabitEthernet 1/0/1 of Switch A.Configure static binding entries on Switch A and Switch B to meet the following requirements:z On port GigabitEthernet 1/0/2 of Switch A, only IP packets from Host C can pass.z On port GigabitEthernet 1/0/1 of Switch A, only IP packets from Host A can pass.z On port GigabitEthernet 1/0/2 of Switch B, only IP packets from Host A can pass.z On port GigabitEthernet 1/0/1 of Switch B, only IP packets from Host B can pass.Network diagramFigure 1-1 Network diagram for configuring static binding entriesIP: 192.168.0.3/24MAC : 00-01-02-03-04-05IP: 192.168.0.1/24MAC: 00-01-02-03-04-06Host AIP: 192.168.0.2/24MAC: 00-01-02-03-04-07Host BHost CGE1/0/2 GE1/0/1GE1/0/2GE1/0/1Switch ASwitch B
