319
Ste
Command
Remarks
3. Enable the IPv6 source guard
function.
ipv6 verify source { ip-address |
ip-address mac-address |
mac-address }
By default, the function is disabled
on an interface.
If you configure this command on
an interface multiple times, the
most recent configuration takes
effect.
Configuring a static IPv6 source guard binding entry
You can configure global and interface-specific static IPv6 source guard binding entries.
A global static binding entry defines both the source IPv6 address and source MAC address of packets
that can be forwarded. It takes effect on all interfaces.
Interface-specific static binding entries take priority over global static binding entries. An interface first
compares an incoming packet with the static binding entries configured on the interface. If no match is
found, the interface uses the global entries.
Configuring a global static IPv6 source guard binding entry
Step Command Remarks
1. Enter system view.
system-view N/A
2. Configure a global
static IPv6 source
guard binding entry.
ipv6 source binding ip-address ipv6-address
mac-address mac-address
No global static IPv6
source guard binding
entry exists.
Configuring a static IPv6 source guard binding entry on an interface
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
The following interface types are supported:
• Layer 2 Ethernet port.
• Layer 3 Ethernet interface.
• Layer 3 Ethernet subinterface.
• VLAN interface.
3. Configure a static IPv6
source guard binding
entry.
ipv6 source binding { ip-address
ipv6-address | ip-address
ipv6-address mac-address
mac-address | mac-address
mac-address } [ vlan vlan-id ]
By default, no static IPv6 source guard
binding entry is configured on an interface.
The vlan vlan-id option is supported only in
Layer 2 Ethernet interface view.
You can configure the same static IPv6
source guard binding entry on different
interfaces.
Displaying and maintaining IP source guard
Execute display commands in any view and reset commands in user view.