1-2To do… Use the command… RemarksConfigure a static binding entryuser-bind { ip-addressip-address |ip-address ip-addressmac-address mac-address |mac-address mac-address }[ vlan vlan-id ]RequiredNo static binding entry exists bydefault.z The system does not support repeatedly binding a binding entry to one port.z A binding entry can be configured to multiple ports.z In a valid binding entry, the MAC address cannot be all 0s, all Fs (a broadcast address), or amulticast address, and the IP address can only be a Class A, Class B, or Class C address and canbe neither 127.x.x.x nor 0.0.0.0.z A static binding entry can be configured on only Layer-2 Ethernet ports.Configuring Dynamic Binding FunctionAfter the dynamic binding function is enabled on a port, IP source guard will receive and processcorresponding DHCP snooping entries, which contain such information as MAC address, IP address,VLAN tag, port information or entry type. It adds the obtained information to the dynamic binding entriesto enable the port to filter packets according to the binding entries.Follow these steps to configure port filtering:To do… Use the command… RemarksEnter system view system-view —Enter interface view interface interface-typeinterface-number —Configure dynamic bindingfunctionip check source { ip-address |ip-address mac-address |mac-address }RequiredNot configured by defaultA port takes only the latest dynamic binding entries configured on it.
