320
Follow the steps to configure a static IPv6 source guard binding entry on a port:
To do… Use the command… Remarks
Enter system view system-view —
Enter Layer 2 interface view
interface interface-type
interface-number
—
Configure a static IPv6 binding
entry on a port
ipv6 source binding { ipv6-address
ipv6-address | ipv6-address
ipv6-address mac-address
mac-address | mac-address
mac-address }
Required
By default, no static IPv6 binding
entry is configured on a port.
NOTE:
• You cannot configure the same static binding entry on one port repeatedly, but you can confi
ure the
same static binding entry on different ports.
• In an IPv6 source guard binding entry, the MAC address cannot be all 0s, all Fs (a broadcast MAC
address), or a multicast address, and the IPv6 address must be a unicast address and cannot be all 0s,
all Fs, or a loopback address.
• If a static bindin
entry to be added denotes the same bindin
as an existin
dynamic bindin
entry, the
new static binding entry overwrites the dynamic binding entry.
Setting the maximum number of IPv6 source guard binding
entries
The maximum number of IPv6 source guard binding entries is used to limit the total number of static and
dynamic IPv6 source guard binding entries on a port. When the number of IPv6 binding entries on a port
reaches the maximum, the port does not allow new IPv6 binding entries any more.
Follow these steps to configure the maximum number of IPv6 binding entries allowed on a port:
To do… Use the command… Remarks
Enter system view system-view —
Enter Layer 2 Ethernet interface
view
interface interface-type
interface-number
—
Configure the maximum number of
IPv6 binding entries allowed on the
port
ipv6 verify source max-entries
number
Optional
2048 by default.
NOTE:
If the maximum number of IPv6 bindin
entries to be confi
ured is smaller than the number of existin
IPv6
binding entries on the port, the maximum number can be confi
ured successfully and the existin
entries
ill be not be affected. New IPv6 bindin
entries, however, cannot be added more unless the number of
IPv6 binding entries on the port drops below the configured maximum.
Displaying and maintaining IP source guard
For IPv4 source guard: