Configuring a static IPv6 source guard binding entry
Static IPv6 binding entries take effect on an interface only when the interface is configured with the IPv6 source guard feature (see "Configuring the IPv6 source guard feature").
You can configure global static and interface-specific static IPv6 source guard binding entries.
Global static binding entries take effect on all interfaces configured with the IPv6 source guard feature.
Interface-specific static binding entries take priority over global static binding entries. An interface first uses the static binding entries on the interface to match packets. If no match is found, the interface uses the global binding entries.
Configuring a global static IPv6 source guard binding entry
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Configure a global static IPv6 source guard binding entry. | ipv6 source binding ip-address ipv6-address mac-address mac-address | By default, no global static IPv6 source guard binding entry exists. |
Configuring a static IPv6 source guard binding entry on an interface
When you configure a static IPv6 source guard binding entry on an interface, follow these guidelines:
You cannot configure the same static binding entry on one interface repeatedly, but you can configure the same static binding entry on different interfaces.
In an IPv6 source guard binding entry, the MAC address cannot be all 0s, all Fs (a broadcast MAC address), or a multicast address, and the IPv6 address must be a unicast address and cannot be all 0s, all Fs, or a loopback address.
IP source guard does not use the VLAN information (if specified) in static IPv6 binding entries to filter packets.
When the ND detection feature is configured, be sure to specify the VLAN where ND detection is configured in static binding entries. Otherwise, ND packets will be discarded because they cannot match any static IPv6 binding entry.
If a static binding entry to be added denotes the same binding as an existing dynamic binding entry, the new static binding entry overwrites the dynamic binding entry.
To configure a static IPv6 source guard binding entry on an interface:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter Layer 2 interface view. | interface interface-type interface-number | N/A |
3. Configure a static IPv6 binding entry on an interface. | ipv6 source binding { ipv6-address ipv6-address | ipv6-address ipv6-address mac-address mac-address | mac-address mac-address } [ vlan vlan-id ] | By default, no static IPv6 binding entry is configured on an interface. |