1-3Displaying and Maintaining IP Source GuardTo do… Use the command… RemarksDisplay information about staticbinding entriesdisplay user-bind [ interfaceinterface-type interface-number| ip-address ip-address |mac-address mac-address ]Available in any viewDisplay information aboutdynamic binding entriesdisplay ip check source[ interface interface-typeinterface-number | ip-addressip-address | mac-addressmac-address ]Available in any viewIP Source Guard Configuration ExamplesStatic Binding Entry Configuration ExampleNetwork requirementsAs shown in Figure 1-1, Host A and Host B are connected to ports GigabitEthernet 1/0/2 andGigabitEthernet 1/0/1 of Switch B respectively, Host C is connected to port GigabitEthernet 1/0/2 ofSwitch A, and Switch B is connected to port GigabitEthernet 1/0/1 of Switch A.Configure static binding entries on Switch A and Switch B to meet the following requirements:z On port GigabitEthernet 1/0/2 of Switch A, only IP packets from Host C can pass.z On port GigabitEthernet 1/0/1 of Switch A, only IP packets from Host A can pass.z On port GigabitEthernet 1/0/2 of Switch B, only IP packets from Host A can pass.z On port GigabitEthernet 1/0/1 of Switch B, only IP packets from Host B can pass.Figure 1-1 Network diagram for configuring static binding entriesConfiguration procedure1) Configure Switch A# Configure the IP addresses of various interfaces (omitted).# Configure port GigabitEthernet 1/0/2 of Switch A to allow only IP packets with the source MACaddress of 00-01-02-03-04-05 and the source IP address of 192.168.0.3 to pass. system-view[SwitchA] interface GigabitEthernet 1/0/2[SwitchA-GigabitEthernet1/0/2] user-bind ip-address 192.168.0.3 mac-address 0001-0203-0405
