Login
- Table of Contents
-
- 10-Security Command Reference
- 00-Preface
- 01-AAA Commands
- 02-802.1X Commands
- 03-MAC Authentication Commands
- 04-Portal Commands
- 05-Password Control Commands
- 06-Public Key Commands
- 07-IPsec Commands
- 08-SSH Commands
- 09-Packet-Filter Firewall Commands
- 10-ALG Commands
- 11-Session Management Commands
- 12-TCP and ICMP Attack Protection Commands
- 13-IP Source Guard Commands
- 14-ARP Attack Protection Commands
- 15-URPF Commands
- 16-COPS Commands
- 17-FIPS Commands
- 18-PKI Commands
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 13-IP Source Guard Commands | 56.24 KB |
display ip check source
Syntax
display ip check source [ interface interface-type interface-number | ip-address ip-address | mac-address mac-address ] [ slot slot-number ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
interface interface-type interface-number: Displays the dynamic IP source guard bindings of the port specified by the port type and number.
ip-address ip-address: Displays the dynamic IP source guard bindings of an IP address.
mac-address mac-address: Displays the dynamic IP source guard bindings of an MAC address (in the format of H-H-H).
slot slot-number: Displays the dynamic IP source guard bindings of a card. slot-number represents the number of the slot that holds the card.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Description
Use the display ip check source command to display IP source guard binding entries.
With no parameters specified, the command displays the dynamic IP source guard binding entries on all interfaces.
If you specify neither an interface nor an interface card, the command displays the dynamic IP source guard binding entries on all interfaces. For dynamic binding entries generated on a global interface (for example, a VLAN interface) if any, the command displays only those on the main control board.
Related commands: ip check source.
Examples
# Display all dynamic IP source guard binding entries.
<Sysname> display ip check source
Total entries found: 1
MAC IP Vlan Port Status
000e-0cb5-0809 7.7.7.1 N/A GigabitEthernet3/1/1 DHCP-RLY
Table 1 Output description
|
Field |
Description |
|
Total entries found: |
Total number of IP source guard binding entries found. |
|
MAC |
MAC address of the dynamic IP source guard binding entry. |
|
IP |
IP address of the dynamic IP source guard binding entry. |
|
Vlan |
VLAN bound to the IP source guard binding entry. N/A means that no VLAN information exists in the entry. |
|
Port |
Interface to which the dynamic IP source guard binding entry is applied. |
|
Status |
Type of dynamically obtained binding entry. |
ip check source
Syntax
ip check source ip-address mac-address
undo ip check source
View
Ethernet interface view, VLAN interface view
Default level
2: System level
Parameters
ip-address mac-address: Binds source IP address and MAC address to the port.
Description
Use the ip check source command to configure the dynamic IP source guard binding function on a port.
Use the undo ip check source command to restore the default.
By default, the dynamic IP source guard binding function is disabled.
You cannot configure the dynamic IP source guard binding function on a port that is in an aggregation group.
Related commands: display ip check source.
Examples
# Configure dynamic IP source guard binding function on port GigabitEthernet 3/1/1 to filter packets based on both source IP address and MAC address.
<Sysname> system-view
[Sysname] interface GigabitEthernet 3/1/1
[Sysname-GigabitEthernet3/1/1] ip check source ip-address mac-address
