Configuring Static IP‑MAC Binding, Interface IP Source Guard, and DHCP Snooping on a Huawei Router
This guide demonstrates how to set up static IP‑MAC bindings, enable IP source guard on GigabitEthernet interfaces, and configure global and VLAN‑specific DHCP Snooping with trusted ports on a Huawei router using command‑line syntax.
user-bindstatic ip-address 10.0.0.1 mac-address0001-0001-0001
user-bindstatic ip-address 10.0.0.11 mac-address0002-0002-0002 //创建绑定表项
interface gigabitethernet0/0/1
ipsource check user-bind enable //使能GE0/0/1接口的IPSG检查功能
quit
interface gigabitethernet0/0/2
ipsource check user-bind enable //使能GE0/0/2接口的IPSG检查功能
quit
dhcpenable //全局使能DHCP功能
dhcpsnooping enable //全局使能DHCP Snooping功能
vlan 10
dhcpsnooping enable //在VLAN视图下使能DHCP Snooping功能
dhcpsnooping trusted interface gigabitethernet0/0/3 //将连接DHCP Server的GE0/0/3接口配置为信任接口
ipsource check user-bind enable //基于VLAN使能IPSG检查功能
quit
Practical DevOps Architecture
Hands‑on DevOps operations using Docker, K8s, Jenkins, and Ansible—empowering ops professionals to grow together through sharing, discussion, knowledge consolidation, and continuous improvement.
How this landed with the community
Was this worth your time?
0 Comments
Thoughtful readers leave field notes, pushback, and hard-won operational detail here.