Dynamic Ipv6Sg Using Dhcpv6 Relay Agent Configuration Example - HPE FlexNetwork 10500 Series Security Configuration Manual

[Device] interface gigabitethernet 1/0/1
[Device-GigabitEthernet1/0/1] ipv6 verify source ip-address mac-address
# Enable recording of client information in DHCPv6 snooping entries on GigabitEthernet 1/0/1.
[Device-GigabitEthernet1/0/1] ipv6 dhcp snooping binding record
[Device-GigabitEthernet1/0/1] quit
Verifying the configuration
# Verify that a dynamic IPv6SG binding is generated based on a DHCPv6 snooping entry.
[Device] display ipv6 source binding dhcpv6-snooping
Total entries found: 1
IPv6 Address
2001::1
Dynamic IPv6SG using DHCPv6 relay agent configuration
example
Network requirements
As shown in
addresses from the DHCPv6 server through the DHCPv6 relay agent.
Enable dynamic IPv6SG on VLAN-interface 3 to filter incoming packets by using the IPv6SG
bindings generated based on DHCPv6 relay entries.
Figure 135 Network diagram
DHCPv6 client
DHCPv6 client
Configuration procedure
1. Configure the DHCPv6 relay agent:
# Create VLAN 2 and VLAN 3, assign interfaces to the VLANs, and specify IP addresses for
VLAN-interface 2 and VLAN-interface 3. (Details not shown.)
# Enable the DHCPv6 relay agent on VLAN-interface 3.
[Switch] interface vlan-interface 3
[Switch-Vlan-interface3] ipv6 dhcp select relay
# Enable recording of DHCPv6 relay entries on the interface.
[Switch-Vlan-interface3] ipv6 dhcp relay client-information record
# Specify the DHCPv6 server address 2::2 on the relay agent.
[Switch-Vlan-interface3] ipv6 dhcp relay server-address 2::2
[Switch-Vlan-interface3] quit
MAC Address
040a-0000-0001 GE1/0/1
Figure 135, DHCPv6 relay agent is enabled on the switch. The clients obtain IPv6
DHCPv6 client
Vlan-int3
1::1/64
Switch
DHCPv6 relay agent
DHCPv6 client
Interface
Vlan-int2
2::1/64
2::2/64
DHCPv6 server
508
VLAN Type
1 DHCPv6 snooping