155Configuring the dynamic IP source guardbinding functionAfter the dynamic IP source guard binding function is enabled on a port, IP source guard willobtain binding entries dynamically through cooperation with DHCP protocols.• Cooperating with DHCP snooping, IP source guard will automatically obtain the DHCPsnooping entries that are generated during dynamic IP address allocation on an Ethernetport.• Cooperating with DHCP Relay, IP source guard will automatically obtain the DHCP Relayentries that are generated during dynamic IP address allocation across network segments ona VLAN interface.Dynamic IP source guard entries can contain such information as MAC address, IP address, VLANtag, ingress port information, and entry type (DHCP snooping or DHCP relay). IP source guardapplies these binding entries to the port, so that the port can filter packets accordingly.Follow these steps to configure the dynamic IP source guard binding function:To do… Use the command… Remarks1. Enter system view system-view —2. Enter interface view interface interface-type interface-number —3. Configure the dynamic IPsource guard binding functionip check source { ip-address| ip-address mac-address |mac-address }RequiredNot configured by default• The dynamic binding function can be configured on Ethernet interfaces and VLAN interfaces.• If you configure dynamic IP source guard binding on a port for multiple times, the last configuration willoverwrite the previous configuration on the port.Displaying and maintaining IP source guardTo do… Use the command… Remarks1. Display information about staticIP source guard binding entriesdisplay user-bind [ interface interface-typeinterface-number | ip-address ip-address |mac-address mac-address ]Available in any view2. Display information aboutdynamic IP source guardbinding entries on a switch instandalone modedisplay ip check source [ interfaceinterface-type interface-number | ip-addressip-address | mac-address mac-address ] [slot slot-number ]Available in any view3. Display information aboutdynamic IP source guardbinding entries on a switch inIRF modedisplay ip check source [ interfaceinterface-type interface-number | ip-addressip-address | mac-address mac-address ] [chassis chassis-number slot slot-number ]Available in any view
