VLAN binding Mac-add, Ip-add

VLAN binding Mac-add, Ip-add implementation only bound users to the Internet, or the gateway is not through, the effect of the network segment.

Configure templates

LSW1:
[Huawei]dis CU

sysname Huawei

VLAN Batch 2

Cluster enable
NTDP Enable
NDP enable

Drop Illegal-mac Alar

User-bind static ip-address 192.168.1.1 mac-address 5489-9891-49fd VLAN 1//Bind IP, Mac
User-bind static ip-address 192.168.2.1 mac-address 5489-98a2-570a VLAN 2

DiffServ domain Default

Drop-profile Default

VLAN 1//Turn on check function
ARP anti-attack check user-bind enable
VLAN 2
ARP anti-attack check user-bind enable

Aaa
Authentication-scheme Default
Authorization-scheme Default
Accounting-scheme Default
Domain default
Domain Default_admin
Local-user Admin Password Simple admin
Local-user Admin Service-type http

Interface VLANIF1
IP address 192.168.1.254 255.255.255.0

Interface Vlanif2
IP address 192.168.2.254 255.255.255.0

Interface METH0/0/1

Interface GIGABITETHERNET0/0/1
Port Link-type Trunk
Port Trunk Allow-pass VLAN 2 to 4094

Interface GIGABITETHERNET0/0/2

VLAN binding Mac-add, Ip-add