Static IPv6 source guard configuration example
Network requirements
As shown in Figure 101, configure a static IPv6 source guard binding entry for Ethernet 1/0/1 of the device to allow only packets from the host to pass.
Figure 101: Network diagram
Configuration procedure
# Configure the IPv6 source guard feature on Ethernet 1/0/1 to filter packets based on both the source IP address and MAC address.
<Device> system-view [Device] interface ethernet 1/0/1 [Device-Ethernet1/0/1] ipv6 verify source ipv6-address mac-address
# Configure Ethernet 1/0/1 to allow only IPv6 packets with the source MAC address of 0001-0202-0202 and the source IPv6 address of 2001::1 to pass.
[Device-Ethernet1/0/1] ipv6 source binding ipv6-address 2001::1 mac-address 0001-0202-0202 [Device-Ethernet1/0/1] quit
Verifying the configuration
# Display the information about static IPv6 source guard binding entries on the device. The output shows that the binding entry is configured successfully.
[Device] display ipv6 source binding static Total entries found: 1 MAC Address IP Address VLAN Interface Type 0001-0202-0202 2001::1 N/A Eth1/0/1 Static-IPv6