Ruijie RG-S2900G-E Series - Page 672

Configuration Guide DHCPv6 Snooping Configuration
Manually Adding Statically Bound Entries
For the users using static IPv6 addresses rather than obtaining IPv6 addresses through DHCPv6
interface, administrator can manually add statically bound entries so that users can communicate
each other after enabling IPv6 source guard on the port.
To add statically bound entries, run the following commands in the privileged EXEC mode:
Command
Function
Ruijie# configure terminal
Enter the global configuration mode.
Ruijie(config)# ipv6 source binding mac-address
vlan vlan-id ipv6-ad dress interface
interface-name
Add the statically bound entries so that users can
use static IPv6 addresses rather than obtaining
IPv6 addresses through DHCPv6 interaction.
Ruijie(config)# end
Exit to the privileged EXEC mode.
Ruijie# show ipv6 source binding
Show all the statically bound entries added by
hand and all the dynamically bound entries
generated by DHCPv6 Snooping.
To delete the statically bound entries, run the no ipv6 source binding mac-address vlan vlan-id
ipv6-address interface interface-name command in the global configuration mode.
Configuration example:
# Add a statically bound user.
Ruijie# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Ruijie(config)# ipv6 source binding 00d0.f866.4777 vlan 10 2001:2002::2003 interface
fastethernet 0/10
Ruijie(config)# end
Ruijie# show ipv6 source binding
Total number of bindings: 1
Mac Address Ipv6 Address Lease(s) type Vlan Interface
-------------- -------------- -------- ---- ----- ---------
00d0.f866.4777 2001:2002::2003 57 static 10 fa 0/10
Configuring the Trust Attribute of a Port
By default, all ports are untrusted. Once DHCPv6 Snooping enabled, the device forwards the
DHCPv6 request message to all trusted ports in a VLAN.
To configure the trust attribute of a port, run the following command in the privileged EXEC mode.
Command
Function
Ruijie# configure terminal
Enter the global configuration mode.
Ruijie(config)# interface interface-name
Enter the interface configuration mode.
Ruijie(config-if)# ipv6 dhcp snooping trust
Configure the port to be trusted.