Configuring A Static Ipv6 Source Guard Entry - HP 12500 Series Configuration Manual

in such a case, IPv6 source guard usually uses the DHCPv6 snooping entries to filter packets on a
port.
Configuration procedure
To configure the IPv6 source guard function on a port:
Step
1. Enter system view.
2. Enter interface view.
3. Configure the IPv6 source
guard function on the port.
NOTE:
The keyword specified in the ipv6 verify source command is only for instructing the generation of dynamic
IPv6 source guard entries. It does not affect static binding entries. When using a static binding entry, a port
does not consider the keyword into consideration.

Configuring a static IPv6 source guard entry

Static IPv6 binding entries take effect only on ports configured with the IPv6 source guard function (see
"Configuring the IPv6 source guard
Configuration restrictions and guidelines
You cannot configure the same static binding entry on one port, but you can configure the same
•
static binding entry on different ports.
In an IPv6 source guard entry, the MAC address cannot be all 0s, all Fs (a broadcast MAC address),
•
or a multicast address, and the IPv6 address must be a unicast address and cannot be all 0s, all Fs,
or a loopback address.
When the ND detection function is configured, make sure to specify the VLAN where ND detection
•
is configured in static binding entries. Otherwise, ND packets will be discarded because they
cannot match any static IPv6 binding entry. For more information about the ND detection function,
see "Configuring ND attack
Configuration procedure
Follow the steps to configure a static IPv6 source guard entry on a port:
Step
1. Enter system view.
2. Enter interface view.
Command
system-view
interface interface-type
interface-number
ipv6 verify source { ipv6-address |
ipv6-address mac-address |
mac-address }
function").
defense."
Command
system-view
interface interface-type
interface-number
254
Remarks
N/A
N/A
Not configured by default.
EB cards do not support the
mac-address keyword.
Remarks
N/A
N/A