Configuring The Ipv6Sg Feature; Enabling Ipv6Sg On An Interface; Configuring A Static Ipv6Sg Binding - HP FlexNetwork 10500 Series Security Configuration Manual

Step
2. Enter interface view.
3. Configure a static
IPv4SG binding.

Configuring the IPv6SG feature

You cannot configure the IPv6SG feature on a service loopback interface. If IPv6SG is enabled on an
interface, you cannot assign the interface to a service loopback group.

Enabling IPv6SG on an interface

When you enable IPv6SG on an interface, the static and dynamic IPv6SG are both enabled.
•
Static IPv6SG uses static bindings configured by using the ipv6 source binding command.
•
Dynamic IPv6SG generates dynamic bindings from related source modules. IPv6SG uses the
bindings to filter incoming IPv6 packets based on the matching criteria specified in the ipv6
verify source command.
To implement dynamic IPv6SG, make sure DHCPv6 snooping operates correctly on the network.
To enable the IPv6SG feature on an interface:
Step
1. Enter system view.
2. Enter interface view.
3. Enable the IPv6SG
feature.

Configuring a static IPv6SG binding

You can configure global static and interface-specific static IPv6SG bindings.
Global static bindings take effect on all interfaces.
Command
interface interface-type
interface-number
ip source binding { ip-address
ip-address | ip-address
ip-address mac-address
mac-address | mac-address
mac-address } [ vlan vlan-id ]
Command
system-view
interface interface-type
interface-number
ipv6 verify source
{ ip-address | ip-address
mac-address | mac-address }
421
Remarks
The following interface types are
supported: Layer 2 Ethernet port, Layer 3
Ethernet interface, VLAN interface.
By default, no static IPv4SG binding is
configured on an interface.
The vlan vlan-id option is supported only
in Layer 2 Ethernet interface view.
To configure a static IPv4SG binding for
the ARP detection function, the vlan
vlan-id option must be specified, and ARP
detection must be enabled for the
specified VLAN.
You can configure the same static
IPv4SG binding on different interfaces.
Remarks
N/A
The following interface types are
supported: Layer 2 Ethernet port, Layer 3
Ethernet interface, VLAN interface, and
Layer 3 aggregate interface.
By default, this feature is disabled on an
interface.
If you configure this command on an
interface multiple times, the most recent
configuration takes effect.