1103
Use undo ipv6 verify source to disable IPv6SG on an interface.
Syntax
ipv6 verify source { ip-address | ip-address mac-address | mac-address }
undo ipv6 verify source
Default
The IPv6SG feature is disabled on an interface.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Parameters
ip-address: Filters incoming packets by source IPv6 addresses.
ip-address mac-address: Filters incoming packets by source IPv6 addresses and source MAC
addresses.
mac-address: Filters incoming packets by source MAC addresses.
Usage guidelines
IMPORTANT:
The IPv6SG feature is not supported on Layer 2 Ethernet ports on the following modules if the
ip-address mac-address or mac-address keyword is specified:
• HMIM-8GSW.
• HMIM-8GSWF.
• HMIM-24GSW.
•
The matching criterion in this command applies only to dynamic IPv6SG. Static IPv6SG uses static
bindings configured by using the ipv6 source binding command.
Dynamic bindings generated from different source modules (DHCPv6 snooping and WLAN
snooping) are for different security services. For more information, see Security Configuration Guide.
You cannot enable dynamic IPv6SG on a service loopback interface.
Examples
# Enable IPv6SG on Layer 2 Ethernet interface GigabitEthernet 1/0/1 and verify the source IPv6
address and MAC address for dynamic IPv6SG.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] ipv6 verify source ip-address mac-address
Related commands
display ipv6 source binding
To Next Page
Loading...
Need help?
General
