Chapter 25 IP Source Guard
GS3700/XGS3700 Series User’s Guide
287
25.9 IPv6 Source Guard Overview
The purpose of IPv6 source guard is to distinguish between authorized and unauthorized users by
using a binding table that validates the source of IPv6 traffic. The binding table can be manually
created or be learned through Dynamic Host Configuration Protocol version 6 snooping (DHCPv6
snooping). IPv6 source guard can deny IPv6 traffic from an unknown source. The IPv6 source guard
binding table includes:
• IPv6 address
• IPv6 prefix
• VLAN ID
• Port number
• MAC address
Enable IPv6 source guard on a port for the Switch to check incoming IPv6 packets on that port. A
packet is allowed when it matches any entry in the IPSG binding table. If a user tries to send IPv6
packets to the Switch that do not match an entry in the IPSG binding table, the Switch will drop
these packets. The Switch forwards matching traffic normally. The IPv6 source guard related
screens are available in standalone mode.
25.10 IPv6 Source Binding Status
Use this screen to look at the current IPv6 dynamic and static bindings and to remove dynamic
bindings based on IPv6 address and/ or IPv6 prefix. Bindings are used to distinguish between
authorized and unauthorized packets in the network. The Switch learns the bindings by snooping
DHCP packets (dynamic bindings) and from information provided manually by administrators (static
bindings). To open this screen, click Advanced Application > I P Source Guard > I Pv6 Source
Binding Status.
Figure 199 Advanced Application > IP Source Guard > IPv6 Source Binding Status (Standalone
mode)
To Next Page
Loading...
