H3C S5510 Series Bedienungsanleitung

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Table of Contents

Table of Contents

Chapter 1 MAC-IP-Port Binding Configuration ..........................................................................1-1

1.1 MAC-IP-Port Binding Overview .........................................................................................1-1

1.2 Configuring MAC-IP-Port Binding......................................................................................1-1

1.3 Displaying and Maintaining MAC-IP-Port Binding.............................................................1-2

1.4 MAC-IP-Port Binding Configuration Example....................................................................1-2

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Chapter 1 MAC-IP-Port Binding Configuration

1-1

Chapter 1 MAC-IP-Port Binding Configuration

1.1 MAC-IP-Port Binding Overview

MAC-IP-port binding allows a device to filter packets and thus enhance security. With

MAC-IP-port binding configured, a port checks whether the source MAC and IP

addresses of an inbound packet is identical to the configured MAC-to-IP binding on the

port. If so, it forwards the packet; otherwise, it discards the packet.

1.2 Configuring MAC-IP-Port Binding

Follow these steps to configure MAC-IP-port binding:

To do… Use the command… Remarks

Enter system view system-view —

Bind a MAC-IP

address pair to

multiple ports

user-bind mac-addr mac-address

ip-addr ip-address interface

interface-list

interface interface-type

interface-number

Configu

MAC-IP

-port

binding

Bind a MAC-IP

address pair to

the current

port user-bind mac-addr mac-address

ip-addr ip-address

Required

Use either

approach.

Caution:

zThe port in an aggregation group does not support MAC-IP-Port binding

configuration.

zS3610&S5510 Series Ethernet Switches differentiate binding through “MAC

address + IP address + port”. You can bind a MAC address with only one IP address

and vice versa. However, you can bind a MAC-IP pair to multiple ports.

zMAC-IP-port binding is on a per-port basis, that is, a port with MAC-IP-port binding

enabled filters packets independently; it does not affect any other port.

zThe MAC address to be bound cannot be all 0s, all Fs, or a multicast address. The

IP address can only be a Class A, Class B, or Class C address and can neither be

127.x.x.x nor 0.0.0.0.

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Chapter 1 MAC-IP-Port Binding Configuration

1-2

1.3 Displaying and Maintaining MAC-IP-Port Binding

To do… Use the command… Remarks

Display the MAC-IP-port binding

entries configured on all ports display user-bind

Display the MAC-IP-port binding

entries configured on all ports for a

specified MAC address

display user-bind

mac-addr mac-address

Display the MAC-IP-port binding

entries configured on all ports for a

specified IP address

display user-bind

ip-addr ip-address

Display the MAC-IP-port binding

entries configured on specified ports display user-bind

interface interface-list

Available in

any view

1.4 MAC-IP-Port Binding Configuration Example

I. Network Requirements

As shown in Figure 1-1, switches LSAand LSB and data terminals DT1, DT2, and DT3

are on an Ethernet. DT1 and DT2 are connected to ports Ethernet 1/0/4 and Ethernet

1/0/5 of LSB respectively, DT3 is connected to port Ethernet 1/0/4 of LSA, while LSB is

connected to port Ethernet 1/0/5 of LSA.

Detailed requirements are as follows:

zOn port Ethernet 1/0/4 of LSA, only IP packets with the source MAC address of

00-01-02-03-04-05 and the source IP address of 192.168.0.3 can pass.

zOn port Ethernet 1/0/5 of LSA, only IP packets with the source MAC address of

00-01-02-03-04-06 and the source IP address of 192.168.0.1 can pass.

zOn port Ethernet 1/0/4 of LSB, only IP packets with the source MAC address of

00-01-02-03-04-06 and the source IP address of 192.168.0.1 can pass.

zOn port Ethernet 1/0/5 of LSB, only IP packets with the source MAC address of

00-01-02-03-04-07 and the source IP address of 192.168.0.2 can pass.

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Chapter 1 MAC-IP-Port Binding Configuration

1-3

II. Network Diagram

LSA

LSB DT3

MAC0

IP192

to inte

DT2

MAC00-01-02-03-04-

IP192.168.0.2

to interface Ethernet

DT1

MAC00-01-02-03-04-06

IP 192.168.0.1

to interface Ethernet1/0/4

Ethernet1/0/4 Ethernet1/0/5

Ethernet1/0/5 Ethernet1/0/4

0-01-02-03-04-05

.168.0.3

rface Ethernet1/0/4

1/0/5

LSA

LSB DT3

MAC0

IP192

to inte

DT2

MAC00-01-02-03-04-

IP192.168.0.2

to interface Ethernet

DT1

MAC00-01-02-03-04-06

IP 192.168.0.1

to interface Ethernet1/0/4

Ethernet1/0/4 Ethernet1/0/5

Ethernet1/0/5 Ethernet1/0/4

0-01-02-03-04-05

.168.0.3

rface Ethernet1/0/4

1/0/5

LSA

LSB DT3

MAC0

IP192

to inte

DT2

MAC00-01-02-03-04-

IP192.168.0.2

to interface Ethernet

DT1

MAC00-01-02-03-04-06

IP 192.168.0.1

to interface Ethernet1/0/4

Ethernet1/0/4 Ethernet1/0/5

Ethernet1/0/5 Ethernet1/0/4

0-01-02-03-04-05

.168.0.3

rface Ethernet1/0/4

1/0/5

Figure 1-1 Network diagram for MAC-IP-port bindin

III. Configuration Procedure

1) Configure LSA

# Configure port Ethernet 1/0/4 of LSA to allow only IP packets with the source MAC

address of 00-01-02-03-04-05 and the source IP address of 192.168.0.3 to pass.

<Sysname> system-view

[Sysname] interface ethernet 1/0/4

[Sysname-Ethernet1/0/4] user-bind mac-addr 0001-0203-0405 ip-addr

192.168.0.3

[Sysname-Ethernet1/0/4] quit

# Configure port Ethernet 1/0/5 of LSA to allow only IP packets with the source MAC

address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass.

[Sysname] interface ethernet 1/0/5

[Sysname-Ethernet1/0/5] user-bind mac-addr 0001-0203-0406 ip-addr

192.168.0.1

2) Configure LSB

# Configure port Ethernet 1/0/4 of LSB to allow only IP packets with the source MAC

address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass.

<Sysname> system-view

[Sysname] user-bind mac-addr 0001-0203-0406 ip-addr 192.168.0.1 interface

ethernet 1/0/4

# Configure port Ethernet1/0/5 of LSB to allow only IP packets with the source MAC

address of 00-01-02-03-04-07 and the source IP address of 192.168.0.2 to pass.

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Chapter 1 MAC-IP-Port Binding Configuration

1-4

[Sysname] user-bind mac-addr 0001-0203-0407 ip-addr 192.168.0.2 interface

ethernet 1/0/5

Andere Handbücher für S5510 Series

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere H3C Schalten Handbücher

H3C

H3C S9500 Series Bedienungsanleitung

H3C

H3C SECPATH 5080F-CMW710-R9628P2414 Anleitung zur Verwendung

H3C

H3C S12500-X Installationshandbuch

H3C

H3C S5120-EI Series Kurzanleitung

H3C

H3C S9500 Series Bedienungsanleitung

H3C

H3C S9820-64H Bedienungsanleitung

H3C

H3C S3100 Series Montageanleitung

H3C

H3C S10500X Series Bedienungsanleitung

H3C

H3C S3100 Series Bedienungsanleitung

H3C

H3C S5810 Series Bedienungsanleitung

H3C

H3C S12500-X Stücklistenhandbuch

H3C

H3C NSQ1GP24TXEA0 LPU Bedienungsanleitung

H3C

H3C S3100-52P Montageanleitung

H3C

H3C S5820 series Installationshandbuch

H3C

H3C S9500E Series Bedienungsanleitung

H3C

H3C S9500 Series Bedienungsanleitung

H3C

H3C S3610 Series Bedienungsanleitung

H3C

H3C S7500E-XS Series Installationshandbuch

H3C

H3C S9500E Series Bedienungsanleitung

H3C

H3C S5500-EI series Bedienungsanleitung

H3C

H3C S7500 Series Bedienungsanleitung

H3C

H3C S3100 Series Installationsanleitung

H3C

H3C S9500 Series Bedienungsanleitung

H3C

H3C S3100 Series Montageanleitung

Beliebte Schalten Handbücher anderer Marken

URC

URC Total Control MFS-8 Bedienungsanleitung

Azbil

Azbil HPQ-D11 Bedienungsanleitung

Sony

Sony DFS-900M Bedienungsanleitung

SICK

SICK i17S Bedienungsanleitung

F&F

F&F SZR-277 Bedienungsanleitung

Shure

Shure UAMS/BK Bedienungsanleitung

Dräger

Dräger X-zone Switch Off Bedienungsanleitung

Asco

Asco Joucomatic 349 Series Bedienungsanleitung

BT Mini Hub Bedienungsanleitung

D-Link

D-Link DES-1226G Bedienungsanleitung

Johnson Controls

Johnson Controls FS80-C Bedienungsanleitung

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Bedienungsanleitung

MicroNet

MicroNet SP1200A Bedienungsanleitung

Ruijie

Ruijie RG-PF2920 Series Installations- und Betriebsanleitung

Altinex

Altinex DA1914SX Bedienungsanleitung

MiLAN

MiLAN MIL-SM2401M Bedienungsanleitung

RJM

RJM MASTERMIND PBC/6X Bedienungsanleitung

Atlas

Atlas MMK-KVM8 Bedienungsanleitung