2-1
2 Port Binding Configuration
Port Binding Overview
Introduction
Port binding enables the network administrator to bind the MAC address and IP address of a user to a
specific port. After the binding, the switch forwards only the packets received on the port whose MAC
address and IP address are identical with the bound MAC address and IP address. This improves
network security and enhances security monitoring.
Configuring Port Binding
Follow these steps to configure port binding:
To do… Use the command… Remarks
Enter system view system-view —
In system
view
am user-bind mac-addr mac-address
ip-addr ip-address interface
interface-type interface-number
interface interface-type interface-number
Bind the MAC
address and
IP address of
a user to a
specific port In Ethernet
port view am user-bind mac-addr mac-address
ip-addr ip-address
User either approach.
By default, no user
MAC address or IP
address is bound to a
port.
z An IP address can be bound to only one port at a time.
z A MAC address can be bound to only one port at a time.
Displaying and Maintaining Port Binding Configuration
To do… Use the command… Remarks
Display port binding information
display am user-bind
[ interface interface-type
interface-number | ip-addr
ip-addr | mac-addr mac-addr ]
Available in any view