Static Ipv6 Source Guard Configuration Example - HP FlexFabric 5930 Series Security Configuration Manual

[Switch-Vlan-interface100] quit
2. Configure the DHCP relay agent:
# Enable the DHCP service.
[Switch] dhcp enable
# Enable recording DHCP relay client entries.
[Switch] dhcp relay client-information record
# Configure VLAN-interface 100 to operate in DHCP relay mode.
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] dhcp select relay
# Specify the IP address of the DHCP server.
[Switch-Vlan-interface100] dhcp relay server-address 10.1.1.1
[Switch-Vlan-interface100] quit
Verifying the configuration
# Display dynamic IPv4 source guard binding entries.
[Switch] display ip source binding dhcp-relay
Total entries found: 1
IP Address
192.168.0.1

Static IPv6 source guard configuration example

Network requirements
As shown in
Configure a static IPv6 source guard binding entry for FortyGigE 1/0/1 of the device to allow only IPv6
packets from the host to pass.
Figure 45 Network diagram
Host
IP: 2001::1
MAC: 0001-0202-0202
Configuration procedure
# Enable IPv6 source guard on FortyGigE 1/0/1.
<Switch> system-view
[Switch] interface fortygige 1/0/1
[Switch-FortyGigE1/0/1] ipv6 verify source ip-address mac-address
# On FortyGigE 1/0/1, configure a static IPv6 source guard binding entry for the host.
[Switch-FortyGigE1/0/1] ipv6 source binding ip-address 2001::1 mac-address 0001-0202-0202
[Switch-FortyGigE1/0/1] quit
# Display static IPv6 source guard binding entries on the device. The output shows that a static IPv6
source guard binding entry is configured successfully.
[Switch] display ipv6 source binding static
Total entries found: 1
MAC Address
0001-0203-0406 Vlan100
Figure 45, the host is connected to FortyGigE 1/0/1 of the device.
FGE1/0/1
Switch
Interface
Internet
151
VLAN Type
100 DHCP relay