Dynamic Ipv6 Source Guard Binding By Nd Snooping Configuration Example - HP 5120 EI Switch Series Configuration Manual

[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] ip check source ipv6 ip-address mac-address
[Device-GigabitEthernet1/0/1] quit
Verification
# Display the dynamic IPv6 source guard binding entries generated on port GigabitEthernet 1/0/1.
[Device] display ip check source ipv6
Total entries found: 1
MAC Address
040a-0000-0001
# Display all DHCPv6 snooping entries to see whether they are consistent with the dynamic IP source
guard entries generated on GigabitEthernet 1/0/1.
[Device] display ipv6 dhcp snooping user-binding dynamic
IP Address
============================== ============== ========== ==== ==================
2001::1
--- 1 DHCPv6 snooping item(s) found
The output shows that a dynamic IPv6 source guard entry has been generated on port GigabitEthernet
1/0/1 based on the DHCPv6 snooping entry.
Dynamic IPv6 source guard binding by ND snooping
configuration example
Network requirements
The client is connected to the device through port GigabitEthernet 1/0/1.
Enable ND snooping on the device, establishing ND snooping entries by listening to DAD NS messages.
Enable the dynamic IPv6 source guard binding function on port GigabitEthernet 1/0/1 to filter packets
based on ND snooping entries, allowing only packets with a legally obtained IPv6 address to pass.
Figure 83 Network diagram for configuring dynamic IPv6 source guard binding by ND snooping
Client
Configuration procedure
Configure ND snooping
1.
# In VLAN 2, enable ND snooping.
<Device> system-view
[Device] vlan 2
[Device-vlan2] ipv6 nd snooping enable
[Device-vlan2] quit
Configure the dynamic IPv6 source guard binding function.
2.
IP Address
2001::1
MAC Address
040a-0000-0001 286
VLAN 2
GE1/0/1 GE1/0/2
Device
ND snooping
VLAN Interface
2 GE1/0/1
Lease VLAN Interface
2
---
IP network
263
Type
DHCPv6-SNP
GigabitEthernet1/0/1