Ip Source Guard Configuration Examples; Static Ipv4 Source Guard Entry Configuration - HP 10500 Series Configuration Manual

Security configuration guide
Hide thumbs Also See for 10500 Series:
Table of Contents

Advertisement

Task
Display static IPv4 source guard
entries (in IRF mode).
Display IPv4 source guard entries
(in standalone mode).
Display IPv4 source guard entries
on (in IRF mode).
Displaying and maintaining IPv6 source guard:
Task
Display static IPv6 source guard
entries (in standalone mode).
Display static IPv6 source guard
entries (in IRF mode).

IP source guard configuration examples

This section provides examples for configuring IP source guard.

Static IPv4 source guard entry configuration

Network requirements
As shown in
GigabitEthernet 1/0/1 of Device B, Host C is connected to port GigabitEthernet 1/0/2 of Device A,
and Device B is connected to port GigabitEthernet 1/0/1 of Device A. All hosts use static IP addresses.
Configure static IPv4 source guard entries on Device A and Device B to meet the following requirements:
On port GigabitEthernet 1/0/2 of Device A, only IP packets from Host C can pass.
On port GigabitEthernet 1/0/1 of Device A, only IP packets from Host A can pass.
On port GigabitEthernet 1/0/2 of Device B, only IP packets from Host A can pass.
Command
display ip source binding static [ interface
interface-type interface-number |
ip-address ip-address | mac-address
mac-address ] [ chassis chassis-number slot
slot-number ] [ | { begin | exclude |
include } regular-expression ]
display ip source binding [ interface
interface-type interface-number |
ip-address ip-address | mac-address
mac-address ] [ slot slot-number ] [ | { begin
| exclude | include } regular-expression ]
display ip source binding [ interface
interface-type interface-number |
ip-address ip-address | mac-address
mac-address ] [ chassis chassis-number slot
slot-number ] [ | { begin | exclude |
include } regular-expression ]
Command
display ipv6 source binding static [ interface
interface-type interface-number |
ipv6-address ipv6-address | mac-address
mac-address ] [ slot slot-number ] [ | { begin |
exclude | include } regular-expression ]
display ipv6 source binding static [ interface
interface-type interface-number |
ipv6-address ipv6-address | mac-address
mac-address ] [ chassis chassis-number slot
slot-number ] [ | { begin | exclude | include }
regular-expression ]
Figure
93, Host A and Host B are connected to ports GigabitEthernet 1/0/2 and
243
Remarks
Available in any view.
Available in any view.
Available in any view.
Remarks
Available in any view.
Available in any view.

Advertisement

Table of Contents
loading

Table of Contents