HP 5120 SI Series

300
Verification
# Display IPv4 source guard entries.
[Switch] display ip check source
Total entries found: 1
MAC Address IP Address VLAN Interface Type
0001-0203-0406 192.168.0.1 100 Vlan100 DHCP-RLY
Static IPv6 source guard configuration example
Network requirements
As shown in Figure 108, the host is connected to port GigabitEthernet 1/0/1 of the device. Configure a
static IPv6 source guard entry for GigabitEthernet 1/0/1 of the device to allow only packets from the
host to pass.
Figure 103 Network diagram
Configuration procedure
# Configure port GigabitEthernet 1/0/1 to allow only IPv6 packets with the source MAC address of
0001-0202-0202 and the source IPv6 address of 2001::1 to pass.
<Device> system-view
[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] user-bind ipv6 ip-address 2001::1 mac-address
0001-0202-0202
[Device-GigabitEthernet1/0/1] quit
Verification
# On the device, display the information about static IPv6 source guard entries. The output shows that the
binding entry is configured successfully.
[Device] display user-bind ipv6
Total entries found: 1
MAC Address IP Address VLAN Interface Type
0001-0202-0202 2001::1 N/A GE1/0/1 Static-IPv6
Dynamic IPv6 source guard using DHCPv6 snooping
configuration example
Network requirements
As shown in Figure 109, the device connects to the host (DHCPv6 client) and the DHCPv6 server through
ports GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 respectively.
Enable DHCPv6 and DHCPv6 snooping on the device, so that the host can obtain an IP address through
the DHCPv6 server and the IPv6 IP address and MAC address of the host can be recorded in a DHCPv6
snooping entry.