ip verify source

Use ip verify source to enable IPv4SG on an interface.

Use undo ip verify source to disable IPv4SG on an interface.

Syntax

ip verify source { ip-address | ip-address mac-address | mac-address }

undo ip verify source

Default

The IPv4SG feature is disabled on an interface.

Views

Layer 2 Ethernet interface view

Layer 3 Ethernet interface view

Layer 3 Ethernet subinterface view

VLAN interface view

Predefined user roles

network-admin

mdc-admin

Parameters

ip-address: Filters incoming packets by source IPv4 addresses.

ip-address mac-address: Filters incoming packets by source IPv4 addresses and source MAC addresses.

mac-address: Filters incoming packets by source MAC addresses.

Usage guidelines

After you enable IPv4SG on an interface, this feature uses static and dynamic IPv4SG bindings to match incoming packets on the interface. Packets that match an IPv4SG binding are forwarded and packets that do not match any IPv4SG binding are discarded.

The matching criterion specified by this command applies only to dynamic IPSG. Static IPv4SG uses static bindings configured by using the ip source binding command.

You cannot enable dynamic IPv4SG on a service loopback interface.

Examples

# Enable IPv4SG on Layer 2 Ethernet interface FortyGigE 1/0/1 and verify the source IPv4 address and MAC address for dynamic IPSG.

<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] ip verify source ip-address mac-address

# Enable IPv4SG on VLAN-interface 100 and verify the source IPv4 address and MAC address for dynamic IPSG.

<Sysname> system-view
[Sysname] interface vlan-interface 100
[Sysname-Vlan-interface100] ip verify source ip-address mac-address

# Enable IPv4SG on Layer 3 Ethernet interface FortyGigE 1/0/2 and verify the source IPv4 address and MAC address for dynamic IPSG.

<Sysname> system-view
[Sysname] interface fortygige 1/0/2
[Sysname-FortyGigE1/0/2] ip verify source ip-address mac-address

# Enable IPv4SG on Layer 3 Ethernet interface FortyGigE 1/0/2 and verify the source MAC address for dynamic IPSG.

<Sysname> system-view
[Sysname] interface fortygige 1/0/2
[Sysname-FortyGigE1/0/2] ip verify source mac-address

Related commands

display ip source binding