Configuring The Dynamic Ipv6 Source Guard Binding Function - HP 5120 EI Switch Series Configuration Manual

To do...
Specify the uplink port as an
excluded port of the global static
binding entry
Follow the steps to configure a port-based static IPv6 source guard binding entry:
To do...
Enter system view
Enter Layer 2 Ethernet interface
view
Configure a static IPv6 source
guard binding entry for the port
NOTE:

You cannot configure the same static binding entry on one port repeatedly, but you can configure the same static
binding entry on different ports.

In an IPv6 source guard binding entry, the MAC address cannot be all 0s, all Fs (a broadcast MAC address), or
a multicast address, and the IPv6 address must be a unicast address and cannot be all 0s, all Fs, or a loopback
address.

Configuring the dynamic IPv6 source guard binding function

With the dynamic IPv6 source guard binding function enabled on a Layer 2 port, IP source guard
dynamically generates IP source guard entries through cooperation with DHCP snooping or ND
snooping.
Cooperating with DHCPv6 snooping, IP source guard dynamically generates IP source guard entries

based on the DHCPv6 snooping entries that are generated during dynamic IP address allocation.
Cooperating with ND snooping, IP source guard dynamically generates IP source guard entries

based on dynamic ND snooping entries.
Dynamic IPv6 source guard entries can contain such information as the MAC address, IPv6 address,
VLAN tag, ingress port information and entry type (DHCPv6 snooping or ND snooping), where the MAC
address, IPv6 address, and/or VLAN tag information may not be included depending on your
configuration. IP source guard applies these entries to the port, so that the port can filter packets.
Follow these steps to configure the dynamic IPv6 source guard binding function:
Use the command...
user-bind uplink
Use the command...
system-view
interface interface-type interface-
number
user-bind ipv6 { ip-address ipv6-
address | ip-address ipv6-
address mac-address mac-address
| mac-address mac-address } [
vlan vlan-id ]
254
Remarks
Optional
By default, a port is not an
excluded port. When you
configure global static
binding entries on a switch,
specify the uplink port of
the switch as an excluded
port of the global static
binding entries.
Remarks
—
—
Required
No static IPv6 source guard
binding entry exists on a port by
default.
The switch does not support the
vlan vlan-id option.