Dynamic Ipv6Sg Using Dhcpv6 Snooping Configuration Example - HP FlexFabric 5700 Series Security Configuration Manual

Figure 109 Network diagram
Configuration procedure
# Enable IPv6SG on Ten-GigabitEthernet 1/0/1.
<Switch> system-view
[Switch] interface ten-gigabitethernet 1/0/1
[Switch-Ten-GigabitEthernet1/0/1] ipv6 verify source ip-address mac-address
# On Ten-GigabitEthernet 1/0/1, configure a static IPv6SG binding for the host.
[Switch-Ten-GigabitEthernet1/0/1] ipv6 source binding ip-address 2001::1 mac-address
0001-0202-0202
[Switch-Ten-GigabitEthernet1/0/1] quit
Verifying the configuration
# Verify that the static IPv6SG binding is configured successfully on the switch.
[Switch] display ipv6 source binding static
Total entries found: 1
IPv6 Address
2001::1
Dynamic IPv6SG using DHCPv6 snooping configuration
example
Network requirements
As shown in
Enable DHCPv6 snooping on the device to record the IPv6 address and the MAC address of the
•
host in a DHCPv6 snooping entry.
• Enable dynamic IPv6SG on Ten-GigabitEthernet 1/0/1 to filter received packets based on
DHCPv6 snooping entries. Only packets from a client that obtains an IP address from the DHCPv6
server are allowed to pass.
Figure 110 Network diagram
Configuration procedure
1. Configure DHCPv6 snooping:
# Enable DHCPv6 snooping globally.
<Switch> system-view
MAC Address
0001-0202-0202 XGE1/0/1
Figure 1 10:
Interface
355
VLAN Type
N/A Static