520
Predefined user roles
network-admin
Parameters
all: Removes all the static IPv6 source guard binding entries on the interface.
ip-address ipv6-address: Specifies an IPv6 address for the static binding entry. The IPv6 address cannot
be an all-zero address, a multicast address, or a loopback address.
mac-address mac-address: Specifies a MAC address for the static binding entry. The MAC address must
be in H-H-H format, and cannot be all 0s, all Fs (a broadcast address), or a multicast address.
vlan vlan-id: Specifies a VLAN ID for the static binding entry. The value range is 1 to 4094.
Usage guidelines
IP source guard can use static IPv6 source guard binding entries on an interface to implement the
following functions:
• Filter incoming IPv6 packets on the interface.
• Check user validity by cooperating with the ND detection feature.
The maximum number of static IPv6 source guard binding entries on a Layer 2 interface varies by
hardware:
• MSR routers installed with the Layer 2 switching module HMIM-24GSW/24GSWP or HMIM-8GSW:
384
• The fixed Layer 2 Ethernet ports on the MSR2004-24 and MSR2004-48: 256
Examples
# Bind IPv6 address 2001::1 and MAC address 0002-0002-0002 to form a static IPv6 source guard
binding entry on GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] ipv6 source binding ip-address 2001::1 mac-address
0002-0002-0002
Related commands
display ipv6 source binding
ipv6 verify source
Use ipv6 verify source to enable the IPv6 source guard function.
Use undo ipv6 verify source to restore the default.
Syntax
ipv6 verify source { ip-address | ip-address mac-address | mac-address }
undo ipv6 verify source
Default
The IPv6 source guard function is disabled on an interface.
Views
Layer 2 Ethernet interface view
To Next Page
Loading...
Need help?
General
