Huawei IPSG Configuration Guide: Static and Dynamic Binding Examples
This guide explains how to configure Huawei IPSG on S-series devices by creating user‑bind tables and enabling IP source checking, providing both static and dynamic configuration examples with VLAN, DHCP snooping, and interface settings.
IPSG configuration on Huawei S-series devices can bind IP, MAC, VLAN, and interface arbitrarily, verify IP packet legality, forward matching packets, and discard non‑matching ones.
The configuration consists of two steps: (1) create a user‑bind table, and (2) enable IP packet checking in the appropriate VLAN or interface view.
Static configuration example:
[HUAWEI] user-bind static ip-address 10.0.0.1 mac-address 0001-0001-0001 // create binding table entry
[HUAWEI] user-bind static ip-address 10.0.0.11 mac-address 0002-0002-0002
[HUAWEI] interface gigabitethernet 0/0/1 // enable IP packet checking
[HUAWEI-GigabitEthernet0/0/1] ip source check user-bind enable
[HUAWEI-GigabitEthernet0/0/1] quit
Dynamic configuration example:
[HUAWEI] dhcp enable // enable DHCP
[HUAWEI] dhcp snooping enable // enable DHCP snooping
[HUAWEI] vlan 10 // enter VLAN 10 view
[HUAWEI-vlan10] dhcp snooping enable // enable DHCP snooping in VLAN view
[HUAWEI-vlan10] dhcp snooping trusted interface gigabitethernet 0/0/3 // set interface connected to DHCP server as trusted
[HUAWEI-vlan10] ip source check user-bind enable // enable IPSG checking based on VLAN
[HUAWEI-vlan10] quit
Practical DevOps Architecture
Hands‑on DevOps operations using Docker, K8s, Jenkins, and Ansible—empowering ops professionals to grow together through sharing, discussion, knowledge consolidation, and continuous improvement.
How this landed with the community
Was this worth your time?
0 Comments
Thoughtful readers leave field notes, pushback, and hard-won operational detail here.