Configuring A Static Ipv6 Source Guard Binding Entry - HP A5830 Series Configuration Manual

Cooperating with DHCPv6 snooping, IP source guard dynamically generates IP source guard entries
based on the DHCPv6 snooping entries that are generated during dynamic IP address allocation.
Cooperating with ND snooping, IP source guard dynamically generates IP source guard entries based
on dynamic ND snooping entries.
Dynamic IPv6 source guard entries can contain such information as the MAC address, IPv6 address,
VLAN tag, ingress port information and entry type (DHCPv6 snooping or ND snooping), where the MAC
address, IPv6 address, and/or VLAN tag information may not be included, depending on your
configuration. IP source guard applies these entries to the port, so that the port can filter packets
accordingly.
To configure the IPv6 source guard function on a port:
To do...
1. Enter system view.
2. Enter Layer 2 Ethernet
interface view, port group
view.
3. Configure the IPv6 source
guard function on the port.
The keyword specified in the ipv6 verify source command is only for instructing the generation of
dynamic IPv6 source guard binding entries. It does not affect static binding entries. When using a static
binding entry, a port does not take the keyword into consideration.
If you repeatedly configure the IPv6 source guard binding function, only the last configuration takes
effect.
To obtain dynamic IPv6 source guard binding entries, make sure that DHCPv6 snooping or ND
snooping is configured and works normally. For DHCPv6 and ND snooping configuration information,
see Layer 3—IP Services Configuration Guide.
If you configure both ND snooping and DHCPv6 snooping on the device, IPv6 source guard uses the
type of entries that are generated first. Because DHCPv6 snooping entries are usually generated first in
such a case, IPv6 source guard usually uses the DHCPv6 snooping entries to filter packets on a port.
Although dynamic IPv6 source guard binding entries are generated based on DHCPv6 entries, the
number of dynamic IPv6 source guard binding entries is not necessarily the same as that of the DHCPv6
entries.

Configuring a static IPv6 source guard binding entry

Static IPv6 binding entries take effect only on ports configured with the IPv6 source guard function (see
"Configuring the IPv6 source guard
Configuring port-based static IPv6 binding entries
To do...
1. Enter system view.
2. Enter Layer 2 interface view.
Use the command...
system-view
interface interface-type interface-
number
ipv6 verify source { ipv6-address
| ipv6-address mac-address |
mac-address }
function").
Use the command...
system-view
interface interface-type interface-
number
212
Remarks
—
—
Required
Not configured by default
Remarks
—
—