Security Commands
338
ProSAFE M7100 Managed Switches
The following shows sample CLI display output for the command.
(switch) #show ip source binding
MAC Address IP Address Type Vlan Interface
----------------- --------------- ------------- ----- -------------
00:00:00:00:00:08 1.2.3.4 dhcp-snooping 2 0/1
00:00:00:00:00:09 1.2.3.4 dhcp-snooping 3 0/1
00:00:00:00:00:0A 1.2.3.4 dhcp-snooping 4 0/1
DHCPv6 Snooping Configuration Commands
This section describes the commands you use to build the DHCPv6 snooping bindings database
DHCPv6 snooping works only with a DHCPv6 stateful server.
The IPv6 Source Guard and Dynamic ARP Inspection features use the DHCPv6 snooping bindings
database:
• IPv6 Source Guard. If you enable the IPv6 Source Guard (IPv6SG) security feature, the
switch drops incoming packets that do not match a binding in the DHCPv6 snooping bindings
database. You can configure IPv6SG to enforce the source IPv6 address only or to enforce
both the source IPv6 address and the source MAC address.
Entries from the DHCPv6 snooping binding database and static IPv6SG entries that you
configur
e are identified as authorized source IDs. You can enable IPv6SG on physical ports
and LAG ports. IPv6SG is disabled by default.
You cannot configure zero, multicast, and loopback IPv6 addresses as static IPv6SG entries.
• Dynamic ARP Inspection. The Dynamic ARP Inspection feature uses the DHCPv6 snooping
bindings database to validate ARP packets.
ipv6 dhcp snooping
This command enables DHCPv6 snooping globally.
no ipv6 dhcp snooping
This command disables DHCPv6 snooping globally.
Default Disabled
Format ipv6 dhcp snooping
Mode Global config
Format no ipv6 dhcp snooping
Mode Global config
To Next Page
Loading...
