Configuring A Static Ipv4Sg Binding; Configuring The Ipv6Sg Feature; Enabling Ipv6Sg On An Interface - HP FlexFabric 5700 Series Security Configuration Manual

Configuring a static IPv4SG binding

You can configure global static and interface-specific static IPv4SG bindings.
Global static bindings take effect on all interfaces.
Interface-specific static bindings take priority over global static bindings. An interface first uses the static
bindings on the interface to match packets. If no match is found, the interface uses the global bindings.
Configuring a global static IPv4SG binding
Step
1. Enter system view.
2. Configure a global
static IPv4SG binding.
Configuring a static IPv4SG binding on an interface
Step
1. Enter system view.
2. Enter interface view.
3. Configure a static
IPv4SG binding.

Configuring the IPv6SG feature

Enabling IPv6SG on an interface

When you enable IPv6SG on an interface, the static and dynamic IPv6SG are both enabled.
Static IPv6SG uses static bindings configured by using the ipv6 source binding command.
•
Dynamic IPv6SG generates dynamic bindings from related source modules. IPv6SG uses the
•
bindings to filter incoming IPv6 packets based on the matching criteria specified in the ipv6 verify
source command.
To implement dynamic IPv6SG, make sure DHCPv6 snooping operates correctly on the network.
To enable the IPv6SG feature on an interface:
Command
system-view
ip source binding ip-address ip-address
mac-address mac-address
Command
system-view
interface interface-type
interface-number
ip source binding { ip-address
ip-address | ip-address
ip-address mac-address
mac-address | mac-address
mac-address } [ vlan vlan-id ]
349
Remarks
N/A
No global static IPv4SG
binding exists.
Remarks
N/A
The following interface types are supported:
•
Layer 2 Ethernet interface.
•
VLAN interface.
By default, no static IPv4SG binding is
configured on an interface.
The vlan vlan-id option is supported only in
Layer 2 Ethernet interface view.
To configure a static IPv4SG binding for the
ARP detection function, the vlan vlan-id
option must be specified, and ARP detection
must be enabled for the specified VLAN.
You can configure the same static IPv4SG
binding on different interfaces.