Edge-Core ECS4110-28T Management Manual page 946

| General Security Measures
C 25
HAPTER
IPv6 Source Guard
ipv6 source-guard
max-binding
entry type is static IPv6 source guard binding, the packet will be
forwarded.
If ND snooping or DHCPv6 snooping is enabled, IPv6 source guard
■
will check the VLAN ID, source IP address, and port number. If a
matching entry is found in the binding table and the entry type is
static IPv6 source guard binding, dynamic ND snooping binding, or
dynamic DHCPv6 snooping binding, the packet will be forwarded.
If IPv6 source guard if enabled on an interface for which IPv6
■
source bindings (dynamically learned via ND snooping or DHCPv6
snooping, or manually configured) are not yet configured, the
switch will drop all IPv6 traffic on that port, except for ND packets
and DHCPv6 packets.
Only IPv6 global unicast addresses are accepted for static bindings.
■
E
XAMPLE
This example enables IP source guard on port 5.
Console(config)#interface ethernet 1/5
Console(config-if)#ipv6 source-guard sip
Console(config-if)#
R C
ELATED OMMANDS
ipv6 source-guard binding (943)
ipv6 dhcp snooping (927)
ipv6 dhcp snooping vlan (931)
This command sets the maximum number of entries that can be bound to
an interface. Use the no form to restore the default setting.
S
YNTAX
ipv6 source-guard max-binding number
no ipv6 source-guard max-binding
number - The maximum number of IPv6 addresses that can be
mapped to an interface in the binding table. (Range: 1-5)
D S
EFAULT ETTING
5
C M
OMMAND ODE
Interface Configuration (Ethernet)
C U
OMMAND SAGE
This command sets the maximum number of address entries that can
◆
be mapped to an interface in the binding table, including both dynamic
entries discovered by ND snooping, DHCPv6 snooping, and static
entries set by the ipv6 source-guard
– 946 –
command.