HP 6125G HP 6125G & 6125G/XG Blade Switches Security Configuration Gui - Page 237
Configuring a static IPv4 source guard entry
View all HP 6125G manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 237 highlights
Step 1. Enter system view. 2. Enter interface view Command system-view interface interface-type interface-number 3. Configure IPv4 source guard on the port. ip verify source { ip-address | ip-address mac-address | mac-address } Remarks N/A The term "interface" collectively refers to the following types of ports and interfaces: Layer 2 Ethernet ports and VLAN interfaces. Not configured by default. NOTE: Although dynamic IPv4 source guard entries are generated based on DHCP entries, the number of dynamic IPv4 source guard entries is not necessarily the same as that of the DHCP entries. Configuring a static IPv4 source guard entry Static IPv4 binding entries take effect only on the ports configured with the IPv4 source guard function (see "Configuring IPv4 source guard on a port"). Follow these guidelines to configure port-based static IPv4 source guard entries: • You cannot repeatedly configure the same static binding entry on one port, but you can configure the same static entry on different ports. • IP source guard does not use the VLAN information (if specified) in static IPv4 binding entries to filter packets. • When the ARP detection function is configured, be sure to specify the VLAN where ARP detection is configured in static IPv4 binding entries. Otherwise, ARP packets are discarded because they cannot match any static IPv4 binding entry. • If a static binding entry to be added denotes the same binding as an existing dynamic binding entry, the new static binding entry overwrites the dynamic binding entry. To configure a static IPv4 binding entry on a port: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter Layer 2 interface view interface interface-type interface-number N/A ip source binding { ip-address 3. Configure a static IPv4 source guard entry on the port. ip-address | ip-address ip-address mac-address mac-address | mac-address mac-address } [ vlan By default, no static IPv4 binding entry is configured on a port. vlan-id ] 227