208 system-view[SwitchB] interface ten-gigabitEthernet 1/0/2[SwitchB-Ten-GigabitEthernet1/0/2] ip verify source ip-address mac-address# On Ten-GigabitEthernet 1/0/2, configure a static IPv4 source guard binding entry to allow onlyIP packets with the source MAC address of 0001-0203-0406 and the source IP address of192.168.0.1 to pass.[SwitchB-Ten-GigabitEthernet1/0/2] ip source binding ip-address 192.168.0.1mac-address 0001-0203-0406[SwitchB-Ten-GigabitEthernet1/0/2] quit# Enable IPv4 source guard on port Ten-GigabitEthernet 1/0/1.[SwitchB] interface ten-gigabitEthernet 1/0/1[SwitchB-Ten-GigabitEthernet1/0/1] ip verify source ip-address mac-address# On Ten-GigabitEthernet 1/0/1, configure a static IPv4 source guard binding entry to allow onlyIP packets with the source MAC address of 0001-0203-0407 and the source IP address of192.168.0.2 to pass.[SwitchB-Ten-GigabitEthernet1/0/1] ip source binding ip-address 192.168.0.2mac-address 0001-0203-0407[SwitchB-Ten-GigabitEthernet1/0/1] quit3. Verify the configuration:# Display static IPv4 source guard binding entries on Switch A. The output shows that the staticIPv4 source guard binding entries are configured successfully. display ip source binding staticTotal entries found: 2IP Address MAC Address Interface VLAN Type192.168.0.1 0001-0203-0405 XGE1/0/2 N/A Static192.168.0.3 0001-0203-0406 XGE1/0/1 N/A Static# Display static IPv4 source guard binding entries on Switch B. The output shows that the static IPv4source guard binding entries are configured successfully. display ip source binding staticTotal entries found: 2IP Address MAC Address Interface VLAN Type192.168.0.1 0001-0203-0406 XGE1/0/2 N/A Static192.168.0.2 0001-0203-0407 XGE1/0/1 N/A StaticDynamic IPv4 source guard using DHCP snoopingconfiguration exampleNetwork requirementsAs shown in Figure 65, the host (the DHCP client) is connected to port Ten-GigabitEthernet 1/0/1 of thedevice, and obtains an IP address from the DHCP server. The DHCP server is connected to portTen-GigabitEthernet 1/0/2 of the switch.Enable DHCP snooping on the switch, so that the host can obtain an IPv4 address from the valid DHCPserver and the IPv4 address and the MAC address of the host can be recorded in a DHCP snoopingentry.
