Configuring the ike nat keepalive function, Static ipv6 source guard configuration example – H3C Technologies H3C S12500-X Series Switches User Manual

Page 227

Advertising
background image

215

[Switch-Vlan-interface100] dhcp relay server-address 10.1.1.1

[Switch-Vlan-interface100] quit

522B

Verifying the configuration

# Display dynamic IPv4 source guard binding entries.

[Switch] display ip source binding dhcp-relay

Total entries found: 1

IP Address MAC Address Interface VLAN Type

192.168.0.1 0001-0203-0406 Vlan100 100 DHCP relay

297B

Static IPv6 source guard configuration example

523B

Network requirements

As shown in

917H

Figure 67

, the host is connected to Ten-GigabitEthernet 1/0/1 of the device.

Configure a static IPv6 source guard binding entry for Ten-GigabitEthernet 1/0/1 of the device to allow

only IPv6 packets from the host to pass.

Figure 67 Network diagram

524B

Configuration procedure

# Enable IPv6 source guard on Ten-GigabitEthernet 1/0/1.

<Switch> system-view

[Switch] interface ten-gigabitethernet 1/0/1

[Switch-Ten-GigabitEthernet1/0/1] ipv6 verify source ip-address mac-address

# On Ten-GigabitEthernet 1/0/1, configure a static IPv6 source guard binding entry for the host.

[Switch-Ten-GigabitEthernet1/0/1] ipv6 source binding ip-address 2001::1 mac-address

0001-0202-0202

[Switch-Ten-GigabitEthernet1/0/1] quit

525B

Verifying the configuration

# Display static IPv6 source guard binding entries on the device.

[Switch] display ipv6 source binding static

Total entries found: 1

IPv6 Address MAC Address Interface VLAN Type

2001::1 0001-0202-0202 XGE1/0/1 N/A Static

The output shows that a static IPv6 source guard binding entry is configured successfully.

Advertising