端口安全配置如下
拓扑图如下:
使用的软件是:ensp
条件：
2台pc机
交换机:
一台 S3700 一台S5700
一台服务器
Server 1
网段为:192.168.10.0网段
pc 1:192.168.10.10/24
pc 2:192.168.10.20/24
Server 1:192.168.10.100/24
配置完 是可以通的
===========================================================================
1、条件是pc2可以ping通，pc1也可以ping通的
配置如下：
SW-1:
<Huawei>system-view //进系统视图
[Huawei]sysname SW-1 //修改主机名为SW-1
[SW-1]int g0/0/1 //进g0/0/1接口
[SW-1-GigabitEthernet0/0/1]port-security enable //开启安全端口模式
[SW-1-GigabitEthernet0/0/1]port-security enable //接口MAC地址信息动态与此接口此端口进行关联
[SW-1-GigabitEthernet0/0/1]port-security max-mac-num 1 //接口关联pc1上的mac地址数量
======================================================================================================
2、先测试PC1 ping Server 1
PC 1 >ping 192.168.10.100
Ping 192.168.10.100: 32 data bytes, Press Ctrl_C to break
From 192.168.10.100: bytes=32 seq=1 ttl=255 time=47 ms
From 192.168.10.100: bytes=32 seq=2 ttl=255 time=31 ms
From 192.168.10.100: bytes=32 seq=3 ttl=255 time=62 ms
From 192.168.10.100: bytes=32 seq=4 ttl=255 time=32 ms
From 192.168.10.100: bytes=32 seq=5 ttl=255 time=31 ms--- 192.168.10.100 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 31/40/62 ms
3、测试之后 可以通的
然后在SW-1设备上查看动态关联信息
[SW-1-GigabitEthernet0/0/1]dis mac-address sticky
MAC address table of slot 0:
-------------------------------------------------------------------------------
MAC Address VLAN/ PEVLAN CEVLAN Port Type LSP/LSR-ID
VSI/SI MAC-Tunnel
-------------------------------------------------------------------------------
5489-98d9-6825 1 - - GE0/0/1 sticky -
-------------------------------------------------------------------------------
Total matching items on slot 0 displayed = 1
4、如果PC2 ping Server1的话 是不通的
PC 2>ping 192.168.10.100
Ping 192.168.10.100: 32 data bytes, Press Ctrl_C to break
From 192.168.10.20: Destination host unreachable
From 192.168.10.20: Destination host unreachable
From 192.168.10.20: Destination host unreachable
From 192.168.10.20: Destination host unreachable
From 192.168.10.20: Destination host unreachable--- 192.168.10.100 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss