521
Predefined user roles
network-admin
Parameters
ip-address: Filters incoming packets by source IPv6 addresses.
ip-address mac-address: Filters incoming packets by source IPv6 addresses and source MAC addresses.
mac-address: Filters incoming packets by source MAC addresses.
Usage guidelines
This command enables both static and dynamic IPv6 source guard on the interface.
Dynamic IPv6 source guard obtains information from DHCPv6 snooping entries to generate dynamic
binding entries, and uses the entries to filter incoming packets based on the matching criteria. The
matching criteria specified in the ipv6 verify source command takes effect on only dynamic IPv6 source
guard.
Static IPv6 source guard filters incoming packets by all matching criteria in a static binding entry. To
configure a static IPv6 source guard binding, use the ipv6 source binding command.
If a packet matches an IPv6 source guard binding entry, IP source guard forwards the packet. Otherwise,
it drops the packet.
Examples
# Enable IPv6 source guard on Layer 2 Ethernet interface GigabitEthernet 2/1/1 and verify the source
IPv6 address and MAC address for dynamic IPv6 source guard.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] ipv6 verify source ip-address mac-address
Related commands
display ipv6 source binding