Chapter 8
| General Security Measures
IPv6 Source Guard
– 315 –
.
.
.
show ipv6 source-
guard binding
This command shows the IPv6 source guard binding table.
Syntax
show ipv6 source-guard binding [dynamic | static]
dynamic - Shows dynamic entries configured with ND Snooping or
DHCPv6 Snooping commands (see page 293)
static - Shows static entries configured with the ipv6 source-guard binding
command.
Command Mode
Privileged Exec
Example
Console#show ipv6 source-guard binding
MAC Address IPv6 Address VLAN Interface Type
-------------- --------------------------------------- ---- --------- ----
00AB-11CD-2345 2001::1 1 Eth 1/5 STA
Console#
IPv6 Source Guard
IPv6 Source Guard is a security feature that filters IPv6 traffic on non-routed, Layer 2
network interfaces based on manually configured entries in the IPv6 Source Guard
table, or dynamic entries in the Neighbor Discovery Snooping table or DHCPv6
Snooping table when either snooping protocol is enabled (see “DHCPv6 Snooping”
on page 293). IPv6 source guard can be used to prevent traffic attacks caused when
a host tries to use the IPv6 address of a neighbor to access the network. This section
describes commands used to configure IPv6 Source Guard.
Table 59: IPv6 Source Guard Commands
Command Function Mode
ipv6 source-guard binding Adds a static address to the source-guard binding table GC
ipv6 source-guard Configures the switch to filter inbound traffic based on
source IP address
IC
ipv6 source-guard max-
binding
Sets the maximum number of entries that can be bound
to an interface
IC
show ipv6 source-guard Shows whether source guard is enabled or disabled on
each interface
PE
show ipv6 source-guard
binding
Shows the source guard binding table PE
To Next Page
Loading...
Need help?
General