H3C Technologies H3C S6300 Series Switches - Manual (Page 330)

315
To implement dynamic IPv6 source guard, make sure that DHCPv6 snooping operates correctly on the
network.
To enable the IPv6 source guard feature on an interface:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number Layer 2 Ethernet ports and VLAN
interfaces are supported.
3. Enable the IPv6 source guard
feature.
ipv6 verify source { ip-address |
ip-address mac-address |
mac-address }
By default, the feature is disabled
on an interface.
If you configure this command on
an interface multiple times, the
most recent configuration takes
effect.
Configuring a static IPv6 source guard binding entry
You can configure global and interface-specific static IPv6 source guard binding entries.
A global static binding entry defines both the source IPv6 address and source MAC address of packets
that can be forwarded. It takes effect on all interfaces.
Interface-specific static binding entries take priority over global static binding entries. An interface first
compares an incoming packet with the static binding entries configured on the interface. If no match is
found, the interface uses the global entries.
Configuring a global static IPv6 source guard binding entry
Step Command Remarks
1. Enter system view. system-view N/A
2. Configure a global
static IPv6 source
guard binding entry.
ipv6 source binding ip-address ipv6-address
mac-address mac-address
No global static IPv6
source guard binding
entry exists.
Configuring a static IPv6 source guard binding entry on an interface
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number Layer 2 Ethernet ports and VLAN interfaces
are supported.
3. Configure a static IPv6
source guard binding
entry.
ipv6 source binding { ip-address
ipv6-address | ip-address
ipv6-address mac-address
mac-address | mac-address
mac-address } [ vlan vlan-id ]
By default, no static IPv6 source guard
binding entry is configured on an interface.
The vlan vlan-id option is supported only in
Layer 2 Ethernet interface view.
You can configure the same static IPv6
source guard binding entry on different
interfaces.