Ipv6 Source-Guard Max-Binding - Edge-Core AS6700-32X Cli Reference Manual

Example
This example enables IP source guard on port 5.
Related Commands
ipv6 source-guard binding (310)
ipv6 dhcp snooping (293)
ipv6 dhcp snooping vlan (298)
ipv6 source-guard
This command sets the maximum number of entries that can be bound to an
max-binding interface. Use the no form to restore the default setting.
Syntax
Default Setting
5
Command Mode
Interface Configuration (Ethernet)
Command Usage
◆
◆
◆
◆
Console(config)#interface ethernet 1/5
Console(config-if)#ipv6 source-guard sip
Console(config-if)#
ipv6 source-guard max-binding number
no ipv6 source-guard max-binding
number - The maximum number of IPv6 addresses that can be mapped to
an interface in the binding table. (Range: 1-5)
This command sets the maximum number of address entries that can be
mapped to an interface in the binding table, including both dynamic entries
discovered by ND snooping, DHCPv6 snooping, and static entries set by the
ipv6 source-guard command.
IPv6 source guard maximum bindings must be set to a value higher than
DHCPv6 snooping maximum bindings and ND snooping maximum bindings.
If IPv6 source guard, ND snooping, and DHCPv6 snooping are enabled on a
port, the dynamic bindings used by ND snooping, DHCPv6 snooping, and IPv6
source guard static bindings cannot exceed the maximum allowed bindings set
by the ipv6 source-guard max-binding command. In other words, no new
entries will be added to the IPv6 source guard binding table.
If IPv6 source guard is enabled on a port, and the maximum number of allowed
bindings is changed to a lower value, precedence is given to deleting entries
learned through DHCPv6 snooping, ND snooping, and then manually
configured IPv6 source guard static bindings, until the number of entries in the
– 319 –
Chapter 8
| General Security Measures
IPv6 Source Guard