DES-7200 Configuration Guide Chapter 5 Port-based Flow Control Configuration
5-10
Command Function
DES-7200(config)# switchport
port-security interface interface-id
binding [mac-address vlan vlan_id]
[ipv4-address]| [ipv6-address]
In the global configuration mode, manually
configure the secure addresss binding on the
port.
In the interface configuration mode, add secure addresses for secure ports by using
the following commands:
Command Function
DES-7200(config-if)# switchport
port-security binding [mac-address
vlan vlan_id]
[ipv4-address]|[ ipv6-address]
In the interface configuration mode, manually
configure the secure addresss binding on the
port.
The example below describes how to configure a secure address for interface
gigabitethernet 0/3 and bind it with an IP address: 192.168.12.202.
DES-7200# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
DES-7200(config)# interface gigabitethernet 0/3
DES-7200(config-if)# switchport mode access
DES-7200(config-if)# switchport port-security
DES-7200(config-if)# switchport port-security binding 192.168.12.202
DES-7200(config-if)# end
The example below describes how to configure a secure address for interface
gigabitethernet 0/3 and bind it with an source IP+MAC address: 192.168.12.202:
00d0.f800.073c.
DES-7200# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
DES-7200(config)# interface gigabitethernet 0/3
DES-7200(config-if)# switchport mode access
DES-7200(config-if)# switchport port-security
DES-7200(config-if)# switchport port-security binding 00d0.f800.073c vlan 1
192.168.12.202
DES-7200(config-if)# end
Note
For the packets that correspond to the IP+MAC binding and IP binding,
they can be forwarded on the condition that the source MAC address
must be the secure address at the same time. For the dynamic secure
address, before adding the secure address to the secure address
table, any packets that correspond to the secure addrss binding or IP
binding can not be forwarded.