# sysname S-switch-A#vlan batch 3#arp static 10.2.2.3 00e0-fc01-0000 vid 3 interface Ethernet0/0/1#interface Vlanif3 ip address 10.2.2.2 255.0.0.0#interface Ethernet 0/0/1 port trunk allow-pass vlan 3#return上面应该是你要的。下面也有更全面的。mac-address static 2-2-2 GigabitEthernet0/0/1 vlan 2MAC+VLAN的绑定dhcp snooping bind-table static ip-address 10.10.10.2 mac-address 0028-0120-0327 interface GigabitEthernet0/0/1DHCP表的绑定mac-address restrict#interface GigabitEthernet0/0/1mac-table limit 100port-security enableport-security protect-action shutdown常规端口安全配置