Setting The Maximum Number Of Ipv6 Source Guard Binding Entries; Displaying And Maintaining Ip Source Guard - HP 3600 v2 Series Configuration Manual
Hide thumbs
Also See for 3600 v2 Series:
- Command reference manual (510 pages) ,
- Configuration manual (441 pages) ,
- Security configuration manual (398 pages)
Table of Contents
Advertisement
IP source guard does not use the VLAN information (if specified) in static IPv6 binding entries to
•
filter packets.
When the ND detection feature is configured, be sure to specify the VLAN where ND detection is
•
configured in static binding entries. Otherwise, ND packets will be discarded because they cannot
match any static IPv6 binding entry.
If a static binding entry to be added denotes the same binding as an existing dynamic binding entry,
•
the new static binding entry overwrites the dynamic binding entry.
To configure a static IPv6 source guard binding entry on an interface:
Step
1.
Enter system view.
2.
Enter Layer 2 interface view.
3.
Configure a static IPv6
binding entry on an interface.
Setting the maximum number of IPv6 source guard binding
entries
The maximum number of IPv6 source guard binding entries is used to limit the total number of static and
dynamic IPv6 source guard binding entries on an interface. When the number of IPv6 binding entries on
an interface reaches the limit, the interface does not allow new IPv6 binding entries any more.
If the maximum number of IPv6 binding entries to be configured is smaller than the number of existing
IPv6 binding entries on the interface, the maximum number can be configured successfully, and the
existing entries are not affected. New IPv6 binding entries, however, cannot be added until the number
of IPv6 binding entries on the interface drops below the configured maximum.
To set the maximum number of IPv6 binding entries for an interface:
Step
1.
Enter system view.
2.
Enter Layer 2 Ethernet
interface view.
3.
Set the maximum number of
IPv6 binding entries for the
interface.
Displaying and maintaining IP source guard
For IPv4 source guard:
Command
system-view
interface interface-type
interface-number
ipv6 source binding { ipv6-address
ipv6-address | ipv6-address
ipv6-address mac-address
mac-address | mac-address
mac-address } [ vlan vlan-id ]
Command
system-view
interface interface-type
interface-number
ipv6 verify source max-entries
number
361
Remarks
N/A
N/A
By default, no static IPv6 binding
entry is configured on an interface.
Remarks
N/A
N/A
Optional.
2048 by default.
Advertisement
Table of Contents
Troubleshooting
