Operations 3 min read

Huawei IPSG Configuration Guide: Static and Dynamic Binding Examples

This guide explains how to configure Huawei IPSG on S-series devices by creating user‑bind tables and enabling IP source checking, providing both static and dynamic configuration examples with VLAN, DHCP snooping, and interface settings.

Practical DevOps Architecture

Jul 17, 2015

Huawei IPSG Configuration Guide: Static and Dynamic Binding Examples

IPSG configuration on Huawei S-series devices can bind IP, MAC, VLAN, and interface arbitrarily, verify IP packet legality, forward matching packets, and discard non‑matching ones.

The configuration consists of two steps: (1) create a user‑bind table, and (2) enable IP packet checking in the appropriate VLAN or interface view.

Static configuration example:

[HUAWEI] user-bind static ip-address 10.0.0.1 mac-address 0001-0001-0001 // create binding table entry

[HUAWEI] user-bind static ip-address 10.0.0.11 mac-address 0002-0002-0002

[HUAWEI] interface gigabitethernet 0/0/1 // enable IP packet checking

[HUAWEI-GigabitEthernet0/0/1] ip source check user-bind enable

[HUAWEI-GigabitEthernet0/0/1] quit

Dynamic configuration example:

[HUAWEI] dhcp enable // enable DHCP

[HUAWEI] dhcp snooping enable // enable DHCP snooping

[HUAWEI] vlan 10 // enter VLAN 10 view

[HUAWEI-vlan10] dhcp snooping enable // enable DHCP snooping in VLAN view

[HUAWEI-vlan10] dhcp snooping trusted interface gigabitethernet 0/0/3 // set interface connected to DHCP server as trusted

[HUAWEI-vlan10] ip source check user-bind enable // enable IPSG checking based on VLAN

[HUAWEI-vlan10] quit

Original Source

Signed-in readers can open the original source through BestHub's protected redirect.

Republication Notice

This article has been distilled and summarized from source material, then republished for learning and reference. If you believe it infringes your rights, please contactand we will review it promptly.

Network Configuration Huawei VLAN DHCP snooping IPSG IP Source Guard

Written by

Practical DevOps Architecture

Hands‑on DevOps operations using Docker, K8s, Jenkins, and Ansible—empowering ops professionals to grow together through sharing, discussion, knowledge consolidation, and continuous improvement.

0 followers

Reader feedback

How this landed with the community

Rate this article

Was this worth your time?

Discussion

0 Comments

Thoughtful readers leave field notes, pushback, and hard-won operational detail here.