Configuring The Ipv6 Source Guard Function; Enabling Ipv6 Source Guard On An Interface; Configuring A Static Ipv6 Source Guard Entry On An Interface; Displaying And Maintaining Ip Source Guard - HP 5920 Series Configuration Manual

Configuring the IPv6 source guard function

You cannot configure the IPv6 source guard function on a service loopback interface. If IPv6 source
guard is enabled on an interface, you cannot assign the interface to a service loopback group.

Enabling IPv6 source guard on an interface

You must first enable the IPv6 source guard function on an interface before the interface can use static
IPv6 binding entries to filter packets. For information about how to configure a static IPv6 binding entry,
see "Configuring a static IPv6 source guard entry on an
To enable the IPv6 source guard function on an interface:
Step
Enter system view.
1.
2. Enter interface view.
3. Enable the IPv6 source guard
function.

Configuring a static IPv6 source guard entry on an interface

Step
1. Enter system view.
2. Enter interface view.
3. Configure a static IPv6
binding entry.
NOTE:
You cannot configure the same static binding entry on one interface multiple times, but you can configure
the same static binding entry on different interfaces.

Displaying and maintaining IP source guard

Execute display commands in any view and reset commands in user view.
For IPv4 source guard:
Command
system-view
interface interface-type
interface-number
ipv6 verify source ip-address
[ mac-address ]
Command
system-view
interface interface-type
interface-number
ipv6 source binding ip-address
ipv6-address [ mac-address
mac-address ] [ vlan vlan-id ]
194
interface."
Remarks
N/A
These types of interfaces are
supported: Ethernet port and VLAN
interface.
By default, the function is disabled
on an interface.
Remarks
N/A
These types of interfaces are supported:
Layer 2 Ethernet interface, Layer 3 Ethernet
port, VLAN interface.
By default, no static IPv6 binding entry is
configured on an interface.
IP source guard does not use the VLAN
information (if specified) in static IPv6
source guard entries to filter packets. You do
not need to specify the VLAN information for
packet filtering.