H3C S5510 Series Manuale utente

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Table of Contents

Table of Contents

Chapter 1 MAC-IP-Port Binding Configuration ..........................................................................1-1

1.1 MAC-IP-Port Binding Overview .........................................................................................1-1

1.2 Configuring MAC-IP-Port Binding......................................................................................1-1

1.3 Displaying and Maintaining MAC-IP-Port Binding.............................................................1-2

1.4 MAC-IP-Port Binding Configuration Example....................................................................1-2

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Chapter 1 MAC-IP-Port Binding Configuration

1-1

Chapter 1 MAC-IP-Port Binding Configuration

1.1 MAC-IP-Port Binding Overview

MAC-IP-port binding allows a device to filter packets and thus enhance security. With

MAC-IP-port binding configured, a port checks whether the source MAC and IP

addresses of an inbound packet is identical to the configured MAC-to-IP binding on the

port. If so, it forwards the packet; otherwise, it discards the packet.

1.2 Configuring MAC-IP-Port Binding

Follow these steps to configure MAC-IP-port binding:

To do… Use the command… Remarks

Enter system view system-view —

Bind a MAC-IP

address pair to

multiple ports

user-bind mac-addr mac-address

ip-addr ip-address interface

interface-list

interface interface-type

interface-number

Configu

MAC-IP

-port

binding

Bind a MAC-IP

address pair to

the current

port user-bind mac-addr mac-address

ip-addr ip-address

Required

Use either

approach.

Caution:

zThe port in an aggregation group does not support MAC-IP-Port binding

configuration.

zS3610&S5510 Series Ethernet Switches differentiate binding through “MAC

address + IP address + port”. You can bind a MAC address with only one IP address

and vice versa. However, you can bind a MAC-IP pair to multiple ports.

zMAC-IP-port binding is on a per-port basis, that is, a port with MAC-IP-port binding

enabled filters packets independently; it does not affect any other port.

zThe MAC address to be bound cannot be all 0s, all Fs, or a multicast address. The

IP address can only be a Class A, Class B, or Class C address and can neither be

127.x.x.x nor 0.0.0.0.

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Chapter 1 MAC-IP-Port Binding Configuration

1-2

1.3 Displaying and Maintaining MAC-IP-Port Binding

To do… Use the command… Remarks

Display the MAC-IP-port binding

entries configured on all ports display user-bind

Display the MAC-IP-port binding

entries configured on all ports for a

specified MAC address

display user-bind

mac-addr mac-address

Display the MAC-IP-port binding

entries configured on all ports for a

specified IP address

display user-bind

ip-addr ip-address

Display the MAC-IP-port binding

entries configured on specified ports display user-bind

interface interface-list

Available in

any view

1.4 MAC-IP-Port Binding Configuration Example

I. Network Requirements

As shown in Figure 1-1, switches LSAand LSB and data terminals DT1, DT2, and DT3

are on an Ethernet. DT1 and DT2 are connected to ports Ethernet 1/0/4 and Ethernet

1/0/5 of LSB respectively, DT3 is connected to port Ethernet 1/0/4 of LSA, while LSB is

connected to port Ethernet 1/0/5 of LSA.

Detailed requirements are as follows:

zOn port Ethernet 1/0/4 of LSA, only IP packets with the source MAC address of

00-01-02-03-04-05 and the source IP address of 192.168.0.3 can pass.

zOn port Ethernet 1/0/5 of LSA, only IP packets with the source MAC address of

00-01-02-03-04-06 and the source IP address of 192.168.0.1 can pass.

zOn port Ethernet 1/0/4 of LSB, only IP packets with the source MAC address of

00-01-02-03-04-06 and the source IP address of 192.168.0.1 can pass.

zOn port Ethernet 1/0/5 of LSB, only IP packets with the source MAC address of

00-01-02-03-04-07 and the source IP address of 192.168.0.2 can pass.

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Chapter 1 MAC-IP-Port Binding Configuration

1-3

II. Network Diagram

LSA

LSB DT3

MAC0

IP192

to inte

DT2

MAC00-01-02-03-04-

IP192.168.0.2

to interface Ethernet

DT1

MAC00-01-02-03-04-06

IP 192.168.0.1

to interface Ethernet1/0/4

Ethernet1/0/4 Ethernet1/0/5

Ethernet1/0/5 Ethernet1/0/4

0-01-02-03-04-05

.168.0.3

rface Ethernet1/0/4

1/0/5

LSA

LSB DT3

MAC0

IP192

to inte

DT2

MAC00-01-02-03-04-

IP192.168.0.2

to interface Ethernet

DT1

MAC00-01-02-03-04-06

IP 192.168.0.1

to interface Ethernet1/0/4

Ethernet1/0/4 Ethernet1/0/5

Ethernet1/0/5 Ethernet1/0/4

0-01-02-03-04-05

.168.0.3

rface Ethernet1/0/4

1/0/5

LSA

LSB DT3

MAC0

IP192

to inte

DT2

MAC00-01-02-03-04-

IP192.168.0.2

to interface Ethernet

DT1

MAC00-01-02-03-04-06

IP 192.168.0.1

to interface Ethernet1/0/4

Ethernet1/0/4 Ethernet1/0/5

Ethernet1/0/5 Ethernet1/0/4

0-01-02-03-04-05

.168.0.3

rface Ethernet1/0/4

1/0/5

Figure 1-1 Network diagram for MAC-IP-port bindin

III. Configuration Procedure

1) Configure LSA

# Configure port Ethernet 1/0/4 of LSA to allow only IP packets with the source MAC

address of 00-01-02-03-04-05 and the source IP address of 192.168.0.3 to pass.

<Sysname> system-view

[Sysname] interface ethernet 1/0/4

[Sysname-Ethernet1/0/4] user-bind mac-addr 0001-0203-0405 ip-addr

192.168.0.3

[Sysname-Ethernet1/0/4] quit

# Configure port Ethernet 1/0/5 of LSA to allow only IP packets with the source MAC

address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass.

[Sysname] interface ethernet 1/0/5

[Sysname-Ethernet1/0/5] user-bind mac-addr 0001-0203-0406 ip-addr

192.168.0.1

2) Configure LSB

# Configure port Ethernet 1/0/4 of LSB to allow only IP packets with the source MAC

address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass.

<Sysname> system-view

[Sysname] user-bind mac-addr 0001-0203-0406 ip-addr 192.168.0.1 interface

ethernet 1/0/4

# Configure port Ethernet1/0/5 of LSB to allow only IP packets with the source MAC

address of 00-01-02-03-04-07 and the source IP address of 192.168.0.2 to pass.

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Chapter 1 MAC-IP-Port Binding Configuration

1-4

[Sysname] user-bind mac-addr 0001-0203-0407 ip-addr 192.168.0.2 interface

ethernet 1/0/5

Altri manuali per S5510 Series

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali H3C Interruttore

H3C

H3C S6812 Series Manuale utente

H3C

H3C S5500-EI series Manuale utente

H3C

H3C S9500 Series Manuale utente

H3C

H3C S9500 Series Manuale utente

H3C

H3C S3100-26T P-EI-W Manuale utente

H3C

H3C S5120-EI Series Manuale utente

H3C

H3C S7506 Manuale utente

H3C

H3C S10500 Series Manuale utente

H3C

H3C S3100 Series Istruzioni per l'installazione

H3C

H3C S5830V2 series Manuale utente

H3C

H3C S7508E-X Manuale operativo e di manutenzione

H3C

H3C S9500 Series Manuale utente

H3C

H3C S9500E Series Manuale utente

H3C

H3C S6850 Series Manuale utente

H3C

H3C H3C S7500E Series Manuale utente

H3C

H3C S5560X-EI Series Manuale utente

H3C

H3C S5130S Series Manuale di istruzioni

H3C

H3C S3100V2 Series Manuale utente

H3C

H3C S5560X-HI Series Manuale di installazione

H3C

H3C S6300 Series Manuale utente

H3C

H3C S5560S-SI Manuale utente

H3C

H3C S9800 Series Manuale utente

H3C

H3C S5830V2 series Manuale utente

H3C

H3C FS5300-EI Series Manuale di istruzioni

Manuali Interruttore popolari di altre marche

URC

URC Total Control MFS-8 Manuale utente

Azbil

Azbil HPQ-D11 Manuale utente

Sony

Sony DFS-900M Manuale utente

SICK

SICK i17S Manuale utente

F&F

F&F SZR-277 Manuale utente

Shure

Shure UAMS/BK Manuale utente

Dräger

Dräger X-zone Switch Off Manuale utente

Asco

Asco Joucomatic 349 Series Manuale utente

BT Mini Hub Manuale utente

D-Link

D-Link DES-1226G Manuale utente

Johnson Controls

Johnson Controls FS80-C Manuale utente

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuale utente

MicroNet

MicroNet SP1200A Manuale utente

Ruijie

Ruijie RG-PF2920 Series Manuale di installazione e funzionamento

Altinex

Altinex DA1914SX Manuale utente

MiLAN

MiLAN MIL-SM2401M Manuale utente

RJM

RJM MASTERMIND PBC/6X Manuale utente

Atlas

Atlas MMK-KVM8 Manuale utente