Configuring Port Mode, VLAN, Management IP, Static Routes, and IP‑MAC Binding on a Quidway Switch

This article provides step‑by‑step commands for configuring a Quidway switch.

Port mode, VLAN creation, and management IP:

# Set port mode
[Quidway] int gigabitethernet 0/0/1
[Quidway-GigabitEthernet0/0/1] port link-type access

# Add ports to VLAN 2
[Quidway] vlan 2
[Quidway-vlan2] port gigabitethernet 0/0/2 to 0/0/20
[Quidway-Vlan2] quit

# Configure VLAN interface IP (management IP)
[Quidway] interface vlanif 2
[Quidway-Vlanif2] ip address 192.168.0.253 255.255.255.0
[Quidway-Vlanif2] shutdown
[Quidway-Vlanif2] undo shutdown

# Set default static route
[Quidway] ip route-static 0.0.0.0 0.0.0.0 192.168.0.253

# Disable WEB server and DHCP services
[Quidway] undo http server enable
[Quidway] undo dhcp enable

These commands set the interface to access mode, create VLAN 2, assign a range of ports to the VLAN, configure a management IP address on the VLAN interface, add a default route, and turn off unnecessary services.

Enable IP‑source check and static IP‑MAC binding:

[Switch]interface g0/0/2
[Switch-GigabitEthernet0/0/2] ip source check user-bind enable
[Switch-GigabitEthernet0/0/2] quit
[Switch]interface g0/0/3
[Switch-GigabitEthernet0/0/3] ip source check user-bind enable
[Switch-GigabitEthernet0/0/3] quit

# Static binding of IP addresses to MAC addresses
[Switch] user-bind static ip-address 12.12.12.1 mac-address 5489-98d7-3ae9
[Switch] user-bind static ip-address 12.12.12.2 mac-address 5489-987b-4b2c

The above commands enable packet source IP‑MAC address binding checks on interfaces g0/0/2 and g0/0/3; packets that fail the check are discarded. The static user‑bind entries define the allowed IP‑to‑MAC mappings.

Testing shows that two PCs can ping each other when using the configured IP addresses, but if either PC changes its IP address, communication fails, confirming that the binding enforcement works.