Ipv6 Verify Source - H3C MSR Series Command Reference Manual

Comware 7 security

Hide thumbs Also See for MSR Series:

Table of Contents

Predefined user roles

network-admin

all: Removes all the static IPv6SG bindings on the interface.

ip-address ipv6-address: Specifies an IPv6 address for the static binding. The IPv6 address cannot

be an all-zero address, a multicast address, or a loopback address.

mac-address mac-address: Specifies a MAC address for the static binding. The MAC address must

be in H-H-H format, and cannot be all 0s, all Fs (a broadcast MAC address), or a multicast MAC

vlan vlan-id: Specifies a VLAN ID for the static binding. The value range is 1 to 4094.

Usage guidelines

Static IPv6SG bindings that contain MAC addresses are not supported on Layer 2 Ethernet ports on

the following modules:

• HMIM-8GSW.

• HMIM-8GSWF.

• HMIM-24GSW.

• HMIM-24GSWP.

Static IPv6SG bindings that contain IP addresses or VLANs are not supported on the following

• MSR810-W-DB.

• MSR810-LM.

• MSR810-W-LM.

• MSR810-10-PoE.

• MSR810-LM-HK.

• MSR810-W-LM-HK.

• MSR2600-10-X1.

Static IPv6SG bindings on an interface filter incoming IPv6 packets on the interface.

You cannot configure static IPv6SG bindings on a service loopback interface.

# Configure a static IPv6SG binding on GigabitEthernet 1/0/1.

<Sysname> system-view

[Sysname] interface gigabitethernet 1/0/1

[Sysname-GigabitEthernet1/0/1] ipv6 source binding ip-address 2001::1 mac-address

0002-0002-0002

Related commands

display ipv6 source binding

ipv6 verify source

Use ipv6 verify source to enable both static and dynamic IPv6SG on an interface.