Method used to delete a static IP-MAC binding item on the USG6000

81

The undo static-bind ip-address command is used to delete a static bound IP address.
The undo static-bind mac-address command is used to delete a static bound MAC address.

Other related questions:
how to delete IP-MAC entries that are statically bind
delete the static binding IP address command:undo static-bind ip-address delete the static binding mac address command:undo static-bind mac-address

Three methods of IP + MAC binding on S series switch
The S series switches, except S1700, support three IP and MAC address binding methods: IPSG, static ARP binding, and static DHCP binding. They are applicable to different scenarios. Details are as follows: Scenario 1: To prevent clients from changing their IP addresses without permission, configure IPSG. Description: Configure a global binding table to bind IP addresses, MAC addresses, interfaces, and VLANs. Enable IPSG on the interfaces or VLANs. When the IP packets from a PC reach an IPSG-enabled interface or VLAN, the switch matches the packets against binding table. If the packets match an entry, the packets are forwarded; otherwise, the packets are discarded. Scenario 2: To prevent ARP spoofing (ARP entries on the switch are modified by fake ARP packets), configure static ARP entries. Description: Static ARP entries are manually configured and maintained. They will not be aged out or overridden by dynamic ARP entries. Static ARP entries ensure communication between the local device and a specified device by using a specified MAC address so that attackers cannot modify mappings between IP addresses and MAC addresses in static ARP entries. Scenario 3: To assign fixed IP addresses to certain users, configure static DHCP binding. Description: If some special clients such as the Web server need fixed IP addresses, bind fixed IP addresses to MAC addresses of these clients. When receiving a request for applying for an IP address from a special client, a DHCP server assigns the fixed IP address bound to the client's MAC address to this client.(The DHCP server preferentially assigns the IP addresses bound to MAC addresses to clients.)

Delete entries in binding tables for IPSG (user-bind binding tables) on S series switches
Delete entries in a binding table for IPSG (user-bind binding table) on an S series switch (except the S1700) as follows: Binding entries include static entries and dynamic entries. Dynamic entries are automatically generated when DHCP snooping is enabled. To delete dynamic entries, disable DHCP snooping. Static entries are configured manually. To delete static entries, perform the following operations: 1. Run the display dhcp static user-bind all command to view all static binding entries on the switch. [HUAWEI] display dhcp static user-bind all 2. Delete binding entries as required. a. Delete the static binding entry of IP address 192.168.1.1. [HUAWEI] undo user-bind static ip-address 192.168.1.1 mac-address 0001-0001-0001 b. Delete the static binding entry of MAC address 0002-0002-0002. [HUAWEI]undo user-bind static mac-address 0002-0002-0002 c. Delete all static binding entries of GE0/0/1. [HUAWEI] undo user-bind static interface gigabitethernet 0/0/1 d. Delete all static binding entries in VLAN 10. [HUAWEI] undo user-bind static vlan 10 e. Delete all entries in the static binding table. [HUAWEI]undo user-bind static

Number of supported static DHCP binding entries on S series switch
S series switches (except S1700 switches) support the static DHCP binding configuration. When configuring static DHCP binding, ensure that IP addresses to be bound exist in a DHCP address pool. If you want to know the maximum number of static DHCP binding entries that can be configured, send an email to e_online@huawei.com.

Method used to configure static ARP binding on USG firewalls
The command used to configure static ARP binding on the USG2000, USG5000, and USG6000 is as follows: In a static ARP entry, the IP address is 10.10.10.1/24, and the corresponding MAC address is 0025-1185-8C21. system-view [USG] arp static 10.10.10.1 0025-1185-8C21

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top