华为设备IPSG配置命令

[Huawei]user-bind static ip-address 10.1.1.1 //配置静态用户绑定表项
[Huawei]dhcp enable //全局使能DHCP功能
[Huawei]dhcp snooping enable //全局使能DHCP Snooping功能
[Huawei-GigabitEthernet0/0/1]dhcp snooping trusted //配置接口为信任状态
[Huawei-GigabitEthernet0/0/1]ip source check user-bind enable //使能接口的IP报文检查功能
[Huawei-vlan10]ip source check user-bind enable // 使能VLAN的IP报文检查功能
[Huawei-GigabitEthernet0/0/1]ip source check user-bind alarm enable //使能IP报文检查告警功能
[Huawei-GigabitEthernet0/0/1]ip source check user-bind alarm threshold 100 //配置IP报文检查告警阈值,缺省为100
[Huawei]display ip source check user-bind interface g0/0/1 //查看接口下IPSG的配置信息
[Huawei]display dhcp static user-bind interface g0/0/1 //查看IPv4静态绑定表信息
[Huawei]ip anti-attack source-ip equals destination-ip drop //配置丢弃源IP地址与目的IP地址相同的IP报文