H3C S5510 Series Bedienungsanleitung

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Table of Contents

Table of Contents

Chapter 1 MAC-IP-Port Binding Configuration ..........................................................................1-1

1.1 MAC-IP-Port Binding Overview .........................................................................................1-1

1.2 Configuring MAC-IP-Port Binding......................................................................................1-1

1.3 Displaying and Maintaining MAC-IP-Port Binding.............................................................1-2

1.4 MAC-IP-Port Binding Configuration Example....................................................................1-2

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Chapter 1 MAC-IP-Port Binding Configuration

1-1

Chapter 1 MAC-IP-Port Binding Configuration

1.1 MAC-IP-Port Binding Overview

MAC-IP-port binding allows a device to filter packets and thus enhance security. With

MAC-IP-port binding configured, a port checks whether the source MAC and IP

addresses of an inbound packet is identical to the configured MAC-to-IP binding on the

port. If so, it forwards the packet; otherwise, it discards the packet.

1.2 Configuring MAC-IP-Port Binding

Follow these steps to configure MAC-IP-port binding:

To do… Use the command… Remarks

Enter system view system-view —

Bind a MAC-IP

address pair to

multiple ports

user-bind mac-addr mac-address

ip-addr ip-address interface

interface-list

interface interface-type

interface-number

Configu

MAC-IP

-port

binding

Bind a MAC-IP

address pair to

the current

port user-bind mac-addr mac-address

ip-addr ip-address

Required

Use either

approach.

Caution:

zThe port in an aggregation group does not support MAC-IP-Port binding

configuration.

zS3610&S5510 Series Ethernet Switches differentiate binding through “MAC

address + IP address + port”. You can bind a MAC address with only one IP address

and vice versa. However, you can bind a MAC-IP pair to multiple ports.

zMAC-IP-port binding is on a per-port basis, that is, a port with MAC-IP-port binding

enabled filters packets independently; it does not affect any other port.

zThe MAC address to be bound cannot be all 0s, all Fs, or a multicast address. The

IP address can only be a Class A, Class B, or Class C address and can neither be

127.x.x.x nor 0.0.0.0.

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Chapter 1 MAC-IP-Port Binding Configuration

1-2

1.3 Displaying and Maintaining MAC-IP-Port Binding

To do… Use the command… Remarks

Display the MAC-IP-port binding

entries configured on all ports display user-bind

Display the MAC-IP-port binding

entries configured on all ports for a

specified MAC address

display user-bind

mac-addr mac-address

Display the MAC-IP-port binding

entries configured on all ports for a

specified IP address

display user-bind

ip-addr ip-address

Display the MAC-IP-port binding

entries configured on specified ports display user-bind

interface interface-list

Available in

any view

1.4 MAC-IP-Port Binding Configuration Example

I. Network Requirements

As shown in Figure 1-1, switches LSAand LSB and data terminals DT1, DT2, and DT3

are on an Ethernet. DT1 and DT2 are connected to ports Ethernet 1/0/4 and Ethernet

1/0/5 of LSB respectively, DT3 is connected to port Ethernet 1/0/4 of LSA, while LSB is

connected to port Ethernet 1/0/5 of LSA.

Detailed requirements are as follows:

zOn port Ethernet 1/0/4 of LSA, only IP packets with the source MAC address of

00-01-02-03-04-05 and the source IP address of 192.168.0.3 can pass.

zOn port Ethernet 1/0/5 of LSA, only IP packets with the source MAC address of

00-01-02-03-04-06 and the source IP address of 192.168.0.1 can pass.

zOn port Ethernet 1/0/4 of LSB, only IP packets with the source MAC address of

00-01-02-03-04-06 and the source IP address of 192.168.0.1 can pass.

zOn port Ethernet 1/0/5 of LSB, only IP packets with the source MAC address of

00-01-02-03-04-07 and the source IP address of 192.168.0.2 can pass.

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Chapter 1 MAC-IP-Port Binding Configuration

1-3

II. Network Diagram

LSA

LSB DT3

MAC0

IP192

to inte

DT2

MAC00-01-02-03-04-

IP192.168.0.2

to interface Ethernet

DT1

MAC00-01-02-03-04-06

IP 192.168.0.1

to interface Ethernet1/0/4

Ethernet1/0/4 Ethernet1/0/5

Ethernet1/0/5 Ethernet1/0/4

0-01-02-03-04-05

.168.0.3

rface Ethernet1/0/4

1/0/5

LSA

LSB DT3

MAC0

IP192

to inte

DT2

MAC00-01-02-03-04-

IP192.168.0.2

to interface Ethernet

DT1

MAC00-01-02-03-04-06

IP 192.168.0.1

to interface Ethernet1/0/4

Ethernet1/0/4 Ethernet1/0/5

Ethernet1/0/5 Ethernet1/0/4

0-01-02-03-04-05

.168.0.3

rface Ethernet1/0/4

1/0/5

LSA

LSB DT3

MAC0

IP192

to inte

DT2

MAC00-01-02-03-04-

IP192.168.0.2

to interface Ethernet

DT1

MAC00-01-02-03-04-06

IP 192.168.0.1

to interface Ethernet1/0/4

Ethernet1/0/4 Ethernet1/0/5

Ethernet1/0/5 Ethernet1/0/4

0-01-02-03-04-05

.168.0.3

rface Ethernet1/0/4

1/0/5

Figure 1-1 Network diagram for MAC-IP-port bindin

III. Configuration Procedure

1) Configure LSA

# Configure port Ethernet 1/0/4 of LSA to allow only IP packets with the source MAC

address of 00-01-02-03-04-05 and the source IP address of 192.168.0.3 to pass.

<Sysname> system-view

[Sysname] interface ethernet 1/0/4

[Sysname-Ethernet1/0/4] user-bind mac-addr 0001-0203-0405 ip-addr

192.168.0.3

[Sysname-Ethernet1/0/4] quit

# Configure port Ethernet 1/0/5 of LSA to allow only IP packets with the source MAC

address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass.

[Sysname] interface ethernet 1/0/5

[Sysname-Ethernet1/0/5] user-bind mac-addr 0001-0203-0406 ip-addr

192.168.0.1

2) Configure LSB

# Configure port Ethernet 1/0/4 of LSB to allow only IP packets with the source MAC

address of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass.

<Sysname> system-view

[Sysname] user-bind mac-addr 0001-0203-0406 ip-addr 192.168.0.1 interface

ethernet 1/0/4

# Configure port Ethernet1/0/5 of LSB to allow only IP packets with the source MAC

address of 00-01-02-03-04-07 and the source IP address of 192.168.0.2 to pass.

Operation Manual – MAC-IP-Port Binding

H3C S3610&S5510 Series Ethernet Switches Chapter 1 MAC-IP-Port Binding Configuration

1-4

[Sysname] user-bind mac-addr 0001-0203-0407 ip-addr 192.168.0.2 interface

ethernet 1/0/5

Andere Handbücher für S5510 Series

Dieses Handbuch passt für folgende Modelle

Inhaltsverzeichnis

Andere H3C Schalten Handbücher

H3C

H3C S5120-HI Series Bedienungsanleitung

H3C

H3C S12500X-AF Series Bedienungsanleitung

H3C

H3C S12500 Series Bedienungsanleitung

H3C

H3C S5830V2 series Bedienungsanleitung

H3C

H3C S5120-SI Series Bedienungsanleitung

H3C

H3C Magic BS200 GE Series Bedienungsanleitung

H3C

H3C S9500 Series Bedienungsanleitung

H3C

H3C S3610 Series Bedienungsanleitung

H3C

H3C H3C S7500E Series Bedienungsanleitung

H3C

H3C S5120-EI Series Installationshandbuch

H3C

H3C S9500 Series Bedienungsanleitung

H3C

H3C UniServer BX608FE Bedienungsanleitung

H3C

H3C S5130S-EI series Bedienungsanleitung

H3C

H3C S7500 Series Bedienungsanleitung

H3C

H3C S6800 Series Installationshandbuch

H3C

H3C S7508E-X Bedienungs- und Wartungshandbuch

H3C

H3C S5500-SI Series Bedienungsanleitung

H3C

H3C S12500-X Bedienungsanleitung

H3C

H3C S3100 Series Montageanleitung

H3C

H3C S5830V2 series Bedienungsanleitung

H3C

H3C S9500 Series Bedienungsanleitung

H3C

H3C T300M-XS Bedienungs- und Wartungshandbuch

H3C

H3C S5120-SI Series Bedienungsanleitung

H3C

H3C S6520X-EI Series Bedienungsanleitung

Beliebte Schalten Handbücher anderer Marken

URC

URC Total Control MFS-8 Bedienungsanleitung

Azbil

Azbil HPQ-D11 Bedienungsanleitung

Sony

Sony DFS-900M Bedienungsanleitung

SICK

SICK i17S Bedienungsanleitung

F&F

F&F SZR-277 Bedienungsanleitung

Shure

Shure UAMS/BK Bedienungsanleitung

Dräger

Dräger X-zone Switch Off Bedienungsanleitung

Asco

Asco Joucomatic 349 Series Bedienungsanleitung

BT Mini Hub Bedienungsanleitung

D-Link

D-Link DES-1226G Bedienungsanleitung

Johnson Controls

Johnson Controls FS80-C Bedienungsanleitung

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Bedienungsanleitung

MicroNet

MicroNet SP1200A Bedienungsanleitung

Ruijie

Ruijie RG-PF2920 Series Installations- und Betriebsanleitung

Altinex

Altinex DA1914SX Bedienungsanleitung

MiLAN

MiLAN MIL-SM2401M Bedienungsanleitung

RJM

RJM MASTERMIND PBC/6X Bedienungsanleitung

Atlas

Atlas MMK-KVM8 Bedienungsanleitung