Displaying and maintaining ip source guard – H3C Technologies H3C S12500-X Series Switches User Manual

Page 222

Advertising
background image

210

293B

Configuring a static IPv6 source guard binding entry

Static IPv6 source guard binding entries include global static IPv6 source entries and interface-specific

static IPv6 source guard binding entries.
A global static IPv6 source guard binding entry defines both the source IPv6 address and source MAC
address of packets that can be forwarded, and it takes effect on all interfaces.
Static IPv6 source guard binding entries on an interface take priority over the global static IPv6 source

guard binding entries. An interface first uses the static IPv6 source guard binding entries configured for

the interface to match a received packet. If no match is found, the interface uses the global ones to match

the packet.

512B

Configuring a global static IPv6 source guard binding entry

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Configure a global
static IPv6 source

guard binding entry.

ipv6 source binding ip-address ipv6-address
mac-address mac-address

No global static IPv6
source guard binding

entry exists.

513B

Configuring a static IPv6 source guard binding entry on an interface

Step Command

Remarks

1.

Enter system view.

system-view

N/A

2.

Enter interface view.

interface interface-type
interface-number

The interface-type argument can be Layer 2
Ethernet interface, Layer 3 Ethernet

interface, and VLAN interface.

3.

Configure a static IPv6
source guard binding

entry.

ipv6 source binding { ip-address

ipv6-address | ip-address
ipv6-address mac-address

mac-address | mac-address

mac-address } [ vlan vlan-id ]

By default, no static IPv6 source guard
binding entry is configured on an interface.
The vlan vlan-id option is supported in only

Layer 2 Ethernet interface view.
You cannot configure the same static IPv6
source guard binding entry on one interface

multiple times, but you can configure the

same static IPv6 source guard binding entry
on different interfaces.

129B

Displaying and maintaining IP source guard

Execute display commands in any view and reset commands in user view.
For IPv4 source guard:

Task Command

Display IPv4 source guard
binding entries (in

standalone mode).

display ip source binding [ static | [ vpn-instance vpn-instance-name ]
[ dhcp-relay | dhcp-server | dhcp-snooping ] ] [ ip-address ip-address ]

[ mac-address mac-address ] [ vlan vlan-id ] [ interface interface-type
interface-number
] [ slot slot-number ]

Advertising