Configuring A Static Ipv6 Source Guard Entry - HP 10500 Series Configuration Manual

Security configuration guide
Hide thumbs Also See for 10500 Series:
Table of Contents

Advertisement

Step
2.
Enter Layer 2 Ethernet
interface view or port group
view.
3.
Enable the IPv6 source guard
function on the port.

Configuring a static IPv6 source guard entry

Static IPv6 binding entries take effect only on ports configured with the IPv6 source guard function (see
"Configuring the IPv6 source guard
Port-based static IPv6 source guard entries and dynamic IPv6 source guard entries take precedence over
global static IPv6 source guard entries. A port matches a packet against global static binding entries only
when the packet does not match any port-based static binding entry or dynamic binding entry on the
port.
Follow these guidelines to configure static IPv6 source guard entries:
You cannot configure the same static binding entry on one port, but you can configure the same
static binding entry on different ports.
In an IPv6 source guard entry, the MAC address cannot be all 0s, all Fs (a broadcast MAC address),
or a multicast address. The IPv6 address must be a unicast address and cannot be all 0s, all Fs, or
a loopback address.
Configuring global static IPv6 binding entries
A global static IPv6 binding entry defines the IPv6 address and MAC address of the packets that can be
forwarded by ports. It takes effect on all ports of the device.
NOTE:
This feature is available in only Release 1203 and later.
To configure a global static IPv6 binding entry:
Step
1.
Enter system view.
2.
Configure a global static IPv6
binding entry.
Configuring port-based static IPv6 binding entries
Command
interface interface-type
interface-number
ipv6 verify source { ipv6-address |
ipv6-address mac-address |
mac-address }
function").
Command
system-view
ipv6 source binding ipv6-address
ipv6-address mac-address
mac-address
241
Remarks
N/A
IP source guard is disabled by
default.
The keyword specified in the ipv6
verify source command does not
affect static binding entries. When
using a static binding entry, a port
does not take the keyword into
consideration.
Remarks
N/A
No global static IPv6 binding entry
is configured by default.

Advertisement

Table of Contents
loading

Table of Contents