Ipv6 Source Guard Overview; Ipv6 Source Binding Status - ZyXEL Communications GS2210 Series User Manual

Table 110 Advanced Application > IP Source Guard > IPv4 Source Guard Setup > ARP Inspection >
Configure > VLAN (continued)
LABEL
Log
Apply
Cancel

26.11 IPv6 Source Guard Overview

The purpose of IPv6 source guard is to distinguish between authorized and unauthorized users by
using a binding table that validates the source of IPv6 traffic. The binding table can be manually
created or be learned through Dynamic Host Configuration Protocol version 6 snooping (DHCPv6
snooping). IPv6 source guard can deny IPv6 traffic from an unknown source. The IPv6 source guard
binding table includes:
• IPv6 address
• IPv6 prefix
• VLAN ID
• Port number
• MAC address
Enable IPv6 source guard on a port for the Switch to check incoming IPv6 packets on that port. A
packet is allowed when it matches any entry in the IPSG binding table. If a user tries to send IPv6
packets to the Switch that do not match an entry in the IPSG binding table, the Switch will drop
these packets. The Switch forwards matching traffic normally.

26.12 IPv6 Source Binding Status

Use this screen to look at the current IPv6 dynamic and static bindings and to remove dynamic
bindings based on IPv6 address and/or IPv6 prefix. Bindings are used to distinguish between
authorized and unauthorized packets in the network. The Switch learns the bindings by snooping
DHCP packets (dynamic bindings) and from information provided manually by administrators (static
bindings). To open this screen, click Advanced Application > IP Source Guard > IPv6 Source
Binding Status.
Chapter 26 IP Source Guard
DESCRIPTION
Specify when the Switch generates log messages for receiving ARP packets from the
VLAN.
None: The Switch does not generate any log messages when it receives an ARP packet
from the VLAN.
Deny: The Switch generates log messages when it discards an ARP packet from the
VLAN.
Permit: The Switch generates log messages when it forwards an ARP packet from the
VLAN.
All: The Switch generates log messages every time it receives an ARP packet from the
VLAN.
Click Apply to save your changes to the Switch's run-time memory. The Switch loses
these changes if it is turned off or loses power, so use the Save link on the top navigation
panel to save your changes to the non-volatile memory when you are done configuring.
Click this to reset the values in this screen to their last-saved values.
GS2210 Series User's Guide
244