7-4[SwitchA-GigabitEthernet1/0/2] user-bind ip-address 192.168.0.3 mac-address 0001-0203-0405[SwitchA-GigabitEthernet1/0/2] quit# Configure port GigabitEthernet 1/0/1 of Switch A to allow only IP packets with the source MACaddress of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass.[SwitchA] interface gigabitethernet 1/0/1[SwitchA-GigabitEthernet1/0/1] user-bind ip-address 192.168.0.1 mac-address 0001-0203-04062) Configure Switch B# Configure the IP addresses of various interfaces (omitted).# Configure port GigabitEthernet 1/0/2 of Switch B to allow only IP packets with the source MACaddress of 00-01-02-03-04-06 and the source IP address of 192.168.0.1 to pass. system-view[SwitchB] interface gigabitethernet 1/0/2[SwitchB-GigabitEthernet1/0/2] user-bind ip-address 192.168.0.1 mac-address 0001-0203-0406[SwitchB-GigabitEthernet1/0/2] quit# Configure port GigabitEthernet 1/0/1 of Switch B to allow only IP packets with the source MACaddress of 00-01-02-03-04-07 and the source IP address of 192.168.0.2 to pass.[SwitchB] interface gigabitethernet 1/0/1[SwitchB-GigabitEthernet1/0/1] user-bind ip-address 192.168.0.2 mac-address 0001-0203-04073) Verify the configuration# On Switch A, static binding entries are configured successfully. display user-bindTotal entries found: 2MAC IP Vlan Port Status0001-0203-0405 192.168.0.3 N/A GigabitEthernet1/0/2 Static0001-0203-0406 192.168.0.1 N/A GigabitEthernet1/0/1 Static# On Switch B, static binding entries are configured successfully. display user-bindTotal entries found: 2MAC IP Vlan Port Status0001-0203-0406 192.168.0.1 N/A GigabitEthernet1/0/2 Static0001-0203-0407 192.168.0.2 N/A GigabitEthernet1/0/1 StaticDynamic Binding Function Configuration ExampleNetwork requirementsSwitch A connects to Client A and the DHCP server through ports GigabitEthernet 1/0/1 andGigabitEthernet 1/0/2 respectively. DHCP snooping is enabled on Switch A.Detailed requirements are as follows:z Client A (with the MAC address of 00-01-02-03-04-06) obtains an IP address through the DHCPserver.z On Switch A, create a DHCP snooping entry for Client A.z On port GigabitEthernet 1/0/1 of Switch A, enable dynamic binding function to prevent attackersfrom using forged IP addresses to attack the server.
