Dynamic Ipv6Sg Using Dhcpv6 Relay Agent Configuration Example - HPE FlexNetwork 7500 Series Security Configuration Manual

Configuration procedure
1. Configure DHCPv6 snooping:
# Enable DHCPv6 snooping globally.
<Device> system-view
[Device] ipv6 dhcp snooping enable
# Configure GigabitEthernet 1/0/2 as a trusted interface.
[Device] interface gigabitethernet 1/0/2
[Device-GigabitEthernet1/0/2] ipv6 dhcp snooping trust
[Device-GigabitEthernet1/0/2] quit
2. Enable IPv6SG:
# Enable IPv6SG on GigabitEthernet 1/0/1 and verify the source IP address and MAC address
for dynamic IPv6SG.
[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] ipv6 verify source ip-address mac-address
# Enable recording of client information in DHCPv6 snooping entries on GigabitEthernet 1/0/1.
[Device-GigabitEthernet1/0/1] ipv6 dhcp snooping binding record
[Device-GigabitEthernet1/0/1] quit
Verifying the configuration
# Verify that a dynamic IPv6SG binding is generated based on a DHCPv6 snooping entry.
[Device] display ipv6 source binding dhcpv6-snooping
Total entries found: 1
IPv6 Address
2001::1
Dynamic IPv6SG using DHCPv6 relay agent configuration
example
Network requirements
As shown in
addresses from the DHCPv6 server through the DHCPv6 relay agent.
Enable dynamic IPv6SG on VLAN-interface 3 to filter incoming packets by using the IPv6SG
bindings generated based on DHCPv6 relay entries.
Figure 120 Network diagram
DHCPv6 client
DHCPv6 client
MAC Address
040a-0000-0001 GE1/0/1
Figure 120, DHCPv6 relay agent is enabled on the switch. The clients obtain IPv6
DHCPv6 client
Vlan-int3
1::1/64
Switch
DHCPv6 relay agent
DHCPv6 client
Interface
Vlan-int2
2::1/64
2::2/64
DHCPv6 server
413
VLAN Type
1 DHCPv6 snooping