HP 6125G HP 6125G & 6125G/XG Blade Switches Security Command Reference - Page 257
ip verify source
View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 257 highlights
vlan vlan-id: Specifies the VLAN for the static binding. vlan-id is the ID of the VLAN to be bound, in the range of 1 to 4094. Description Use ip source binding to configure a static IPv4 source guard entry on a port. Use undo ip source binding to delete a static IPv4 source guard entry from a port. By default, no static IPv4 binding entry exists on a port. IP source guard does not use the VLAN information (if specified) in static IPv4 binding entries to filter packets. When the ARP detection function is configured, be sure to specify the VLAN where ARP detection is configured in static IPv4 binding entries. Otherwise, ARP packets are discarded because they cannot match any static IPv4 binding entry. For more information about the ARP detection function, see Security Configuration Guide. You cannot configure the same static binding entry repeatedly on one port, but you can configure the same static entry on different ports. You cannot configure a static binding entry on a port that is in an aggregation group or a service loopback group. Related commands: display ip source binding static. Examples # Configure a static IPv4 binding entry (IP+MAC binding) on port GigabitEthernet 1/0/1. system-view [Sysname] interface gigabitethernet 1/0/1 [Sysname-GigabitEthernet1/0/1] ip source binding ip-address 192.168.0.1 mac-address 0001-0001-0001 ip verify source Syntax ip verify source { ip-address | ip-address mac-address | mac-address } View undo ip verify source Layer 2 Ethernet interface view, VLAN interface view Default level 2: System level Parameters ip-address: Binds source IPv4 addresses to the port. ip-address mac-address: Binds source IPv4 addresses and MAC addresses to the port. mac-address: Binds source MAC addresses to the port. Description Use ip verify source to enable the IPv4 source guard function on a port and specify the elements to be included in the port's dynamic binding entries. Use undo ip verify source to restore the default. 248