ZyXEL Communications GS2220 Series - Ipv6 Source Guard Policy Setup

Chapter 28 ARP Inspection
GS2220 Series User’s Guide
282
28.6 IPv6 So urc e G ua rd Po lic y Se tup
Use this screen to have IPv6 source guard forward valid IPv6 addresses and/or IPv6 prefixes that are
stored in the binding table and allow or block data traffic from all link-local addresses. To open this
screen, click Adva nc e d Applic a tio n > IP So urc e G ua rd > IPv6 So urc e G ua rd Po lic y Se tup.
•If you select Va lida te Addre ss and not Va lida te Pre fix, traffic for a binding entry that matches a IPv6
address and VLAN ID, port number, and MAC address will be forwarded. If this binding entry is a IPv6
prefix, the traffic will be denied.
•If you select Va lida te Pre fix and not Va lida te Addre ss, traffic for a binding entry that matches a IPv6
prefix and VLAN ID, port number, and MAC address will be forwarded. If this binding entry is a IPv6
address, the traffic will be denied.
•If you select both Va lida te Pre fix and Va lida te Addre ss then traffic matching either IPv6 address or
prefix will be forwarded.
Fig ure 212 Advanced Application > IP Source Guard > IPv6 Source Guard Policy Setup
The following table describes the labels in this screen.
Select an entry’s check box to select a specific entry. Otherwise, select the check box in the
table heading row to select all entries.
Delete Select an entry check box and click De le te to remove the specified entry.
Cancel Click this to clear the De le te check boxes above.
Table 133 Advanced Application > IP Source Guard > IPv6 Static Binding Setup (continued)
LABEL DESCRIPTIO N
Table 134 Advanced Application > IP Source Guard > IPv6 Source Guard Policy Setup
LABEL DESCRIPTIO N
Name Enter a descriptive name for identification purposes for this IPv6 source guard policy.
Validate Address Select Va lida te Addre ss to have IPv6 source guard forward valid addresses that are stored in
the binding table.
Validate Prefix Select Va lida te Pre fix to have IPv6 source guard forward valid prefixes that are stored in the
binding table.
Link Local Select Pe rm it to allow data traffic from all link-local addresses; otherwise leave the setting at
De ny. A link-local address is an IPv6 unicast address that can be automatically configured on
any interface using the link-local prefix FE80::/10 and the interface identifier in the modified
EUI-64 format.
Add Click this to create the IPv6 source guard policy or to update an existing one.
Cancel Click this to reset the values above or if not applicable, to clear the fields above.