Chapter 8
| General Security Measures
IPv6 Source Guard
– 316 –
ipv6 source-guard
binding
This command adds a static address to the source-guard binding table. Use the no
form to remove a static entry.
Syntax
ipv6 source-guard binding mac-address vlan vlan-id ipv6-address
interface interface
no ipv6 source-guard binding mac-address vlan vlan-id
mac-address - A valid unicast MAC address.
vlan-id - ID of a configured VLAN (Range: 1-4094)
ipv6-address - Corresponding IPv6 address. This address must be entered
according to RFC 2373 “IPv6 Addressing Architecture,” using 8 colon-
separated 16-bit hexadecimal values. One double colon may be used in the
address to indicate the appropriate number of zeros required to fill the
undefined fields.
interface
ethernet unit/port
unit - Unit identifier. (Range: 1)
port - Port number. (Range: 1-32/54)
Default Setting
No configured entries
Command Mode
Global Configuration
Command Usage
◆ Table entries include an associated MAC address, IPv6 global unicast address,
lease time,
entry type (Static-IP-SG-Binding, Dynamic-ND-Snooping, Dynamic-
DHCPv6-Snooping), VLAN identifier, and port identifier.
◆ Traffic filtering is based only on the source IPv6 address, VLAN ID, and port
number.
◆ All static entries are configured with an infinite lease time, which is indicated
with a value of zero by the show ipv6 source-guard command.
◆ When source guard is enabled, traffic is filtered based upon dynamic entries
learned via ND snooping, DHCPv6 snooping, or static addresses configured in
the source guard binding table with this command.
◆ An entry with same MAC address and a different VLAN ID cannot be added to
the binding table.
To Next Page
Loading...
Need help?
General