Home > other >  Consult, huawei 9306 as the core switch, how to completely prevent IP
Consult, huawei 9306 as the core switch, how to completely prevent IP

Time:10-23

The present main configuration:
Global mode:
[Huawei] user - bind the static IP - address 192.168.0.100 MAC address - the 1111-2222-3333

Interface configuration:
Huawei - GigabitEthernet0/.two survivors arp anti - attack check user - bind the enable
Huawei - GigabitEthernet0/.two survivors IP source check user - bind the enable

As a result, the purpose of IP + MAC binding, is indeed the MAC for the 1111-2222-3333 client can only use the IP address of the 192.168.0.100 to get to the Internet, (assuming that only the above that a user - the bind the static command, the whole interface g/0/02 and only that a computer can surf the Internet, these are not problems,)

But now a new problem comes, an employee in the administrator unwittingly, a common household router's wan IP address, also set to 192.168.0.100, obviously this router is not even on the Internet, then he put the router with electric connecting cables, throw whatever there, lead to the original normal network computer (192.168.0.100) also on the network (IP),

Now the problem is that the two devices are not online,

Want to consult everybody a great god, huawei 9306 how to avoid this kind of circumstance happening?
The younger brother novice, self-study, hope everybody glad to great god,