289
ip check source
Syntax
ip check source
{
ip-address
|
ip-address
mac-address
|
mac-address
}
undo ip check source
View
Layer 2 Ethernet interface view, VLAN interface view
Default level
2: System level
Parameters
ip-address
: Binds source IPv4 addresses to the port.
ip-address mac-address
: Binds source IPv4 addresses and MAC addresses to the port.
mac-address
: Binds source MAC addresses to the port.
Description
Use the
ip check source
command to configure the dynamic IP source guard function on a port.
Use the
undo ip check source
command to restore the default.
By default, the dynamic IP source guard binding function is disabled.
You cannot configure the dynamic IP source guard function on a port in an aggregation group.
Related commands:
display ip check source
.
Examples
# Configure dynamic IPv4 binding of packet source IP address and MAC address on Layer 2 Ethernet
port GigabitEthernet 1/0/1 to filter packets based on the dynamically generated DHCP snooping
entries.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] ip check source ip-address mac-address
# Configure dynamic IPv4 binding of packet source IP address and MAC address on VLAN-interface
100 to filter packets based on the dynamically generated DHCP relay entries.
<Sysname> system-view
[Sysname] interface vlan-interface 100
[Sysname-Vlan-interface100] ip check source ip-address mac-address
ip check source ipv6
Syntax
ip check source ipv6 ip-address
[
mac-address
]
undo ip check source ipv6
View
Layer 2 Ethernet interface view
