14.6 IPSG

1.配置IPSG防止主机仿冒其他主机IP地址（静态绑定）

[SW1]user-bind static ip-address 192.168.1.1 mac-address 5489-9848-3711   
[SW1]user-bind static ip-address 192.168.1.2 mac-address 5489-9896-2625 
//创建静态绑定表项
[SW1]interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1]ip source check user-bind enable 
[SW1]interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2]ip source check user-bind enable
//接口使能IPSG功能
[SW1]display dhcp static user-bind all 
192.168.1.1                     5489-9848-3711  --  /--  /--    --              
192.168.1.2                     5489-9896-2625  --  /--  /--    --              
//查看静态表项

配置IPSG防止主机仿冒其他主机IP地址（动态绑定）

1）R1配置DHCP服务器

[R1]dhcp enable
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.1.254 24
[R1-GigabitEthernet0/0/0]dhcp select global 
[R1]ip pool dsrw
R1-ip-pool-dsrw]gateway-list 192.168.1.254
[R1-ip-pool-dsrw]network 192.168.1.0 mask 255.255.255.0
[R1-ip-pool-dsrw]dns-list 8.8.8.8 114.114.114.114

2）SW1配置

[SW1]dhcp enable 
[SW1]dhcp snooping enable
[SW1]vlan 1
[SW1-vlan1]dhcp snooping enable 
//VLAN使能dhcp snooping
[SW1-vlan1]dhcp snooping trusted interface GigabitEthernet 0/0/24
//配置为信任接口
[SW1-vlan1]ip source check user-bind enable 
//使能IPSG功能

3）PC1配置静态IP地址，PC2设置动态获取IP地址,SW1查看绑定

[SW1]display dhcp snooping user-bind all
192.168.1.253    5489-9896-2625  1   /--  /--    GE0/0/2        2023.02.15-19:02