HP 12500 Series Configuration Manual page 268

[DeviceA-GigabitEthernet3/0/2] quit
# Configure the IPv4 source guard function on GigabitEthernet 3/0/1 to filter packets based on
both the source IP address and MAC address.
[DeviceA] interface GigabitEthernet 3/0/1
[DeviceA-GigabitEthernet3/0/1] ip verify source ip-address mac-address
# Configure GigabitEthernet 3/0/1 to allow only IP packets with the source MAC address of
0001-0203-0406 and the source IP address of 192.168.0.1 to pass.
[DeviceA-GigabitEthernet3/0/1] ip source binding ip-address 192.168.0.1 mac-address
0001-0203-0406
[DeviceA-GigabitEthernet3/0/1] quit
Configure Device B:
2.
# Configure the IPv4 source guard function on GigabitEthernet 3/0/2 to filter packets based on
both the source IP address and MAC address.
[DeviceB] interface GigabitEthernet 3/0/2
[DeviceB-GigabitEthernet3/0/2] ip verify source ip-address mac-address
# Configure GigabitEthernet 3/0/2 to allow only IP packets with the source MAC address of
0001-0203-0406 and the source IP address of 192.168.0.1 to pass.
[DeviceB] interface GigabitEthernet 3/0/2
[DeviceB-GigabitEthernet3/0/2] ip source binding ip-address 192.168.0.1 mac-address
0001-0203-0406
[DeviceB-GigabitEthernet3/0/2] quit
# Configure the IPv4 source guard function on GigabitEthernet 3/0/1 to filter packets based on
the source IP address.
[DeviceB] interface GigabitEthernet 3/0/1
[DeviceB-GigabitEthernet3/0/1] ip verify source ip-address
# Configure GigabitEthernet 3/0/1 to allow only IP packets with the source IP address of
192.168.0.2 to pass.
[DeviceB-GigabitEthernet3/0/1] ip source binding ip-address 192.168.0.2
[DeviceB-GigabitEthernet3/0/1] quit
Verify the configuration:
3.
# On Device A, display information about static IPv4 source guard entries. The output shows that
the static IPv4 source guard entries are configured successfully.
[DeviceA] display ip source binding static
Total entries found: 2
MAC Address
0001-0203-0405
0001-0203-0406
# On Device B, display information about static IPv4 source guard entries. The output shows that
the static IPv4 source guard entries are configured successfully.
[DeviceB] display ip source binding static
Total entries found: 2
MAC Address
0001-0203-0406
N/A
IP Address VLAN
192.168.0.3 N/A
192.168.0.1 N/A
IP Address VLAN
192.168.0.1 N/A
192.168.0.2 N/A
258
Interface
GE3/0/2
GE3/0/1
Interface
GE3/0/2
GE3/0/1
Type
Static
Static
Type
Static
Static