H3C S7500 Series User manual

Operation Manual – Port Binding
H3C S7500 Series Ethernet Switches Table of Contents
i
Table of Contents
Chapter 1 Port Binding Configuration......................................................................................... 1-1
1.1 Port Binding Overview.......................................................................................................1-1
1.2 Configuring Port Binding....................................................................................................1-1
1.3 Displaying Port Binding Configuration...............................................................................1-2
1.4 Port Binding Configuration Example..................................................................................1-2

Operation Manual – Port Binding
H3C S7500 Series Ethernet Switches Chapter 1 Port Binding Configuration
1-1
Chapter 1 Port Binding Configuration
When configuring port binding, go to these sections for information you are interested
in:
zPort Binding Overview
zConfiguring Port Binding
zDisplaying Port Binding Configuration
zPort Binding Configuration Example
1.1 Port Binding Overview
Port binding enables the network administrator to bind the MAC address and IP
address of a user to a specific port. After the binding, the switch forwards only the
packets received on the port whose MAC address and IPaddress are identical with the
bound MAC address and IP address. This improves network security and enhances
security monitoring.
1.2 Configuring Port Binding
Follow these steps to configure port binding:
To do… Use the command… Remarks
Enter system view system-view —
Bind the legal MAC addresses
and IP addresses to the
specified port
am user-bind { mac-addr
mac-address |ip-addr
ip-address }* interface-list Optional
Enter port view interface interface-type
interface-number —
Bind the legal MAC addresses
and IP addresses to the
current port
am user-bind { mac-addr
mac-address |ip-addr
ip-address }* Optional
Note:
You can bind up to 100 MAC addresses and IP addresses to one port.

Operation Manual – Port Binding
H3C S7500 Series Ethernet Switches Chapter 1 Port Binding Configuration
1-2
1.3 Displaying Port Binding Configuration
To do… Use the command… Remarks
Display the
information about
port binding
display am user-bind [ interface
interface-type interface-number |
mac-addr |ip-addr ]
Available in any
view.
1.4 Port Binding Configuration Example
I. Network requirements
In order to prevent illegal use of the IPaddress of PC 1, you may bind the MAC address
and IP address of PC 1 to port Ethernet 2/0/1 on SwitchA.
II. Network diagram
SwitchA Eth2/0/1 SwitchB
IP Address:10.12.1.1
MAC: 0001- 0002-0003
Host1
Host 2
n Figure 1-1 Network diagram for port binding configuratio
III. Configuration procedure
# Enter system view.
<H3C> system-view
# Enter Ethernet 2/0/1 port view.
[H3C] interface Ethernet2/0/1
# Bind the MAC address and the IP address of PC 1 to Ethernet 2/0/1.
[H3C-Ethernet2/0/1] am user-bind mac-addr 0001-0002-0003 ip-addr 10.12.1.1