Configuring A Static Ipv6 Source Guard Binding Entry; Displaying And Maintaining Ip Source Guard - HP 5920 Series Configuration Manual

Step
3. Enable the IPv6 source guard
function.

Configuring a static IPv6 source guard binding entry

You can configure global and interface-specific static IPv6 source guard binding entries.
A global static binding entry defines both the source IPv6 address and source MAC address of packets
that can be forwarded. It takes effect on all interfaces.
Interface-specific static binding entries take priority over global static binding entries. An interface first
compares an incoming packet with the static binding entries configured on the interface. If no match is
found, the interface uses the global entries.
Configuring a global static IPv6 source guard binding entry
Step
1. Enter system view.
2. Configure a global
static IPv6 source
guard binding entry.
Configuring a static IPv6 source guard binding entry on an interface
Step
1. Enter system view.
2. Enter interface view.
3. Configure a static IPv6
source guard binding
entry.

Displaying and maintaining IP source guard

Execute display commands in any view and reset commands in user view.
Command
ipv6 verify source { ip-address |
ip-address mac-address |
mac-address }
Command
system-view
ipv6 source binding ip-address ipv6-address
mac-address mac-address
Command
system-view
interface interface-type
interface-number
ipv6 source binding { ip-address
ipv6-address | ip-address
ipv6-address mac-address
mac-address | mac-address
mac-address } [ vlan vlan-id ]
319
Remarks
By default, the function is disabled
on an interface.
If you configure this command on
an interface multiple times, the
most recent configuration takes
effect.
Remarks
N/A
No global static IPv6
source guard binding
entry exists.
Remarks
N/A
The following interface types are supported:
•
Layer 2 Ethernet port.
•
Layer 3 Ethernet interface.
•
Layer 3 Ethernet subinterface.
•
VLAN interface.
By default, no static IPv6 source guard
binding entry is configured on an interface.
The vlan vlan-id option is supported only in
Layer 2 Ethernet interface view.
You can configure the same static IPv6
source guard binding entry on different
interfaces.