Static Ipv6 Source Guard Entry Configuration - HP 10500 Series Configuration Manual

Security configuration guide
Hide thumbs Also See for 10500 Series:
Table of Contents

Advertisement

Figure 95 Network diagram
Configuration procedure
1.
Configure the IPv4 source guard function:
# Configure IP addresses for the interfaces. (Details not shown.)
# Configure the IPv4 source guard function on VLAN-interface 100 to filter packets based on both
the source IP address and MAC address.
<Switch> system-view
[Switch] vlan 100
[Switch-Vlan100] quit
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] ip verify source ip-address mac-address
[Switch-Vlan-interface100] quit
2.
Configure the DHCP relay agent:
# Enable DHCP relay.
[Switch] dhcp enable
# Configure the IP address of the DHCP server.
[Switch] dhcp relay server-group 1 ip 10.1.1.1
# Configure VLAN-interface 100 to operate in DHCP relay mode.
[Switch] interface vlan-interface 100
[Switch-Vlan-interface100] dhcp select relay
# Correlate VLAN-interface 100 with DHCP server group 1.
[Switch-Vlan-interface100] dhcp relay server-select 1
[Switch-Vlan-interface100] quit
Verifying the configuration
# Display the generated IPv4 source guard entries.
[Switch] display ip source binding
Total entries found: 1
MAC Address
0001-0203-0406

Static IPv6 source guard entry configuration

Network requirements
As shown in
static IPv6 source guard entry for GigabitEthernet 1/0/1 of the device to allow only packets from the
host to pass.
IP Address
192.168.0.1
Figure
96, the host is connected to port GigabitEthernet 1/0/1 of the device. Configure a
VLAN
Interface
100
Vlan100
247
Type
DHCP-RLY

Advertisement

Table of Contents
loading

Table of Contents