Syntax
am user-bind { mac-addr mac-address | ip-addr ip-address
}* interface-list
undo am user-bind { mac-addr mac-address | ip-addr ip-address
} interface-list
View
System view
Parameter
mac-address:
MAC address to be bound.
ip-address:
IP address to be bound.
interface-list: List of destination ports, expressed in the form of interface-list
= interface-type interface-number [ to interface-type
interface-number ] &<1-10>, where:
l
interface-type
represents the type of the port to be bound;
l
interface-number
represents the number of the port to be bound;
l
The to keyword specifies a group of
contiguous ports. The port number after the to keyword must be not
smaller than that before the to keyword.
l
&<1-10> means that you can provide up
to 10 port indexes/port index lists for this argument.
Description
Use the am user-bind command to bind
the MAC and IP addresses of a legal user to a specified port.
Use the undo am user-bind command to
cancel the binding.
After a binding operation, only the packets
from a valid user can be forwarded through the port.
You can bind up to
100 MAC addresses and IP addresses to one port.
Example
# Bind the legal user whose MAC address is
000f-e20f-5600 and whose IP address is 10.1.1.1 to the port
GigabitEthernet1/0/2.
<H3C> system-view
System View: return to User View with
Ctrl+Z.
[H3C] am user-bind mac-addr
000f-e20f-5600 ip-addr 10.1.1.1 GigabitEthernet1/0/2
Syntax
am user-bind { mac-addr mac-address | ip-addr ip-address
}*
undo am user-bind [ mac-addr mac-address | ip-addr ip-address
]
View
Ethernet port view
Parameter
mac-address:
MAC address to be bound.
ip-address:
IP address to be bound.
Description
Use the am user-bind command to bind
the MAC and IP addresses of a legal user to the current port.
Use the undo am user-bind command to
cancel the binding.
After such a binding operation, only
packets from a valid user can be forwarded through the current port.
You can bind up to
100 MAC addresses and IP addresses to one port.
Example
# Bind the legal user whose MAC address is
000f-e20f-5600 and whose IP address is 10.1.1.1 to the port
GigabitEthernet1/0/2.
<H3C> system-view
System View: return to User View with
Ctrl+Z.
[H3C] interface GigabitEthernet1/0/2
[H3C-GigabitEthernet1/0/2] am
user-bind mac-addr 000f-e20f-5600 ip-addr 10.1.1.1
Syntax
display am user-bind [ interface interface-type interface-number |
mac-addr | ip-addr ]
View
Any view
Parameter
interface:
Specifies to display the binding information of a specified port.
interface-type: Port type.
interface-number: Port number.
mac-addr:
Specifies to display the binding information of an MAC address.
ip-addr:
Specifies to display the binding information of an IP address.
Description
Use the display am user-bind command
to display the information about port binding.
Example
# Display the information about port
binding.
<H3C> display am user-bind
Following address bind have been
configured (* means that the rule is set by system):
Mac
IP Port
000f-e20f-5101
1.2.3.3 Ethernet3/0/2
000f-e20f-5102
2.3.2.3 Ethernet3/0/4
The display shows that the following MAC
addresses and IP addresses are bound to two ports:
l
MAC address 000f-e20f-5101 and IP address
1.2.3.3 are bound to Ethernet3/0/2.
l
MAC address 000f-e20f-5102 and IP address
2.3.2.3 are bound to Ethernet3/0/4.