Dynamic Ipv6 Source Guard By Nd Snooping Configuration Example - HP 12500 Series Configuration Manual

# Display all DHCPv6 snooping entries to see whether they are consistent with the dynamic IP
source guard entries generated on GigabitEthernet 3/0/1.
[Device] display ipv6 dhcp snooping user-binding dynamic
IP Address
============================== ============== ========== ==== ==================
2001::1
---
The output shows that a dynamic IPv6 source guard entry has been generated on port
GigabitEthernet 3/0/1 based on the DHCPv6 snooping entry.
Dynamic IPv6 source guard by ND snooping configuration
example
Network requirements
The client is connected to the device through port GigabitEthernet 3/0/1.
Enable ND snooping on the device, establishing ND snooping entries by listening to DAD NS messages.
Enable the IPv6 source guard function on port GigabitEthernet 3/0/1 to filter packets based on the ND
snooping entries, allowing only packets with a legally obtained IPv6 address to pass.
Figure 92 Network diagram
Configuration procedure
Enable ND snooping in VLAN 2:
1.
<Device> system-view
[Device] vlan 2
[Device-vlan2] ipv6 nd snooping enable
[Device-vlan2] quit
Configure the IPv6 source guard function on GigabitEthernet 3/0/1 to filter packets based on
2.
both the source IP address and MAC address:
[Device] interface GigabitEthernet 3/0/1
[Device-GigabitEthernet3/0/1] ipv6 verify source ipv6-address mac-address
[Device-GigabitEthernet3/0/1] quit
Verify the configuration:
3.
# Display the IPv6 source guard entries generated on port GigabitEthernet 3/0/1.
[Device] display ipv6 source binding
Total entries found: 1
MAC Address
040a-0000-0001
# Display the IPv6 ND snooping entries to see whether they are consistent with the dynamic IP
source guard entries generated on GigabitEthernet 3/0/1.
1 DHCPv6 snooping item(s) found
IP Address
2001::1
MAC Address Lease
040a-0000-0001 286
---
VLAN Interface
2 GigabitEthernet3/0/1
263
VLAN Interface
2 GigabitEthernet3/0/1
Type
ND-SNP