Configuring A Static Ipv6 Source Guard Binding Entry - HP 3600 v2 Series Configuration Manual

Step
2. Enter Layer 2 Ethernet
interface view or port group
view.
3. Configure the IPv6 source
guard feature on the
interface.
NOTE:
Although dynamic IPv6 source guard binding entries are generated based on DHCPv6 entries, the
number of dynamic IPv6 source guard binding entries is not necessarily the same as that of the DHCPv6
entries.

Configuring a static IPv6 source guard binding entry

Static IPv6 binding entries take effect on an interface only when the interface is configured with the IPv6
source guard feature (see
You can configure global static and interface-specific static IPv6 source guard binding entries.
Global static binding entries take effect on all interfaces configured with the IPv6 source guard feature.
Interface-specific static binding entries take priority over global static binding entries. An interface first
uses the static binding entries on the interface to match packets. If no match is found, the interface uses
the global binding entries.
Configuring a global static IPv6 source guard binding entry
Step
1. Enter system view.
2. Configure a global
static IPv6 source
guard binding entry.
Configuring a static IPv6 source guard binding entry on an interface
When you configure a static IPv6 source guard binding entry on an interface, follow these guidelines:
You cannot configure the same static binding entry on one interface repeatedly, but you can
•
configure the same static binding entry on different interfaces.
• In an IPv6 source guard binding entry, the MAC address cannot be all 0s, all Fs (a broadcast MAC
address), or a multicast address, and the IPv6 address must be a unicast address and cannot be all
0s, all Fs, or a loopback address.
Command
interface interface-type
interface-number
ipv6 verify source { ipv6-address |
ipv6-address mac-address |
mac-address }
"Configuring the IPv6 source guard
Command
system-view
ipv6 source binding ip-address ipv6-address
mac-address mac-address
360
Remarks
N/A
Not configured by default.
The keyword specified in the ipv6
verify source command is only for
instructing the generation of
dynamic IPv6 source guard
binding entries. It does not affect
static binding entries. When using
a static binding entry, an interface
does not consider the keyword into
consideration.
feature").
Remarks
N/A
By default, no global static
IPv6 source guard binding
entry exists.