- Table of Contents
-
- 07-Security Command Reference
- 00-Preface
- 01-AAA Commands
- 02-802.1X Commands
- 03-MAC Authentication Commands
- 04-Portal Commands
- 05-Port Security Commands
- 06-User Profile Commands
- 07-Password Control Commands
- 08-Public Key Commands
- 09-PKI Commands
- 10-SSH Commands
- 11-SSL Commands
- 12-SSL VPN Commands
- 13-TCP Attack Protection Commands
- 14-ARP Attack Protection Commands
- 15-IPsec Commands
- 16-ALG Commands
- 17-Firewall Commands
- 18-Session Management Commands
- 19-Web Filtering Commands
- 20-User Isolation Commands
- 21-Source IP Address Verification Commands
- 22-FIPS Commands
- 23-Protocol Packet Rate Limit Commands
- 24-Attack detection and protection commands
- Related Documents
-
Title | Size | Download |
---|---|---|
21-Source IP Address Verification Commands | 39.28 KB |
Source IP address verification commands
display wlan client source binding
Use display wlan client source binding to display IPv4/IPv6 binding entries.
Syntax
display wlan client { ip | ipv6 } source binding [ mac-address mac-address ] [ | { begin | exclude | include } regular-expression ]
Views
Any view
Default command level
1: Monitor level
Parameters
ip: Displays IPv4 binding entries.
ipv6: Displays IPv6 binding entries.
mac-address mac-address: Displays binding entries of an MAC address. If this option is not provided, this command displays all IPv4/IPv6 binding entries.
|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display all IPv4 binding entries.
<Sysname> display wlan client ip source binding
Total Number of Clients: 2
IP Source Binding Information
-------------------------------------------------------------
MAC Address APID/RID Type Binding IP Address
-------------------------------------------------------------
001d-0f31-87dd 1/2 N/A N/A
001c-f08f-f7f1 2/2 DHCP 192.168.0.6
-------------------------------------------------------------
# Display all IPv6 binding entries.
<Sysname> display wlan client ipv6 source binding
Total Number of Clients: 3
IPv6 Source Binding Information
------------------------------------------------------------
MAC Address APID/RID Type Binding IP Address
------------------------------------------------------------
001d-0f31-87dd 1/2 N/A N/A
001c-f08f-f7f1 10/2 DHCPv6 2001::1
DHCPv6 2001::2
001c-70cd-65a1 1/1 ND 2001::
------------------------------------------------------------
Table 1 Command output
Field |
Description |
Total Number of Clients |
Total number of binding entries, which is consistent with the number of online clients. |
MAC Address |
MAC address of the binding entry. The MAC address is the client's MAC address, which is displayed when the client gets online. |
APID/RID |
AP ID and radio ID of the binding entry, which means the client gets online through the AP ID/RID. |
Type |
Type of IP address in the binding entry, including: · Static—Static IPv4 address. · DHCP—IPv4 address obtained through DHCP. · DHCPv6—IPv6 address or IPv6 address prefix obtained through DHCPv6. · ND—IPv6 address prefix generated through ND. · N/A—IP address not obtained when the client is associated with the AP. |
Binding IP Address |
IP address of the binding entry. N/A means IP address is not obtained through DHCP, DHCPv6, or ND after the client is associated with the AP. · For an IPv4 binding entry, one MAC address can be bound with four IPv4 addresses. · For an IPv6 binding entry, one MAC address can be bound with at most 10 IPv6 addresses, which include up to five IPv6 address prefixes and five IPv6 addresses. |
· ip verify source
· ipv6 verify binding
ip verify source
Use ip verify source command to enable source IP address verification for IPv4 clients.
Use undo ip verify source to restore the default.
Syntax
ip verify source
undo ip verify source
Default
Source IP address verification is disabled for IPv4 clients.
Views
Service template view
Default command level
2: System level
Examples
# Enable source IP address verification for IPv4 clients.
<Sysname> system-view
[Sysname] wlan service-template 1
[Sysname-wlan-st-1] ip verify source
Related commands
display wlan client source binding
ipv6 verify source
Use ipv6 verify source command to enable source IP address verification for IPv6 clients.
Use undo ipv6 verify source to restore the default.
Syntax
ipv6 verify source
undo ipv6 verify source
Default
Source IP address verification is disabled for IPv6 clients.
Views
Service template view
Default command level
2: System level
Examples
# Enable source IP address verification for IPv6 clients.
<Sysname> system-view
[Sysname] wlan service-template 1
[Sysname-wlan-st-1] ipv6 verify source
Related commands
display wlan client source binding