ipv6 source binding

Syntax

ipv6 source binding { ipv6-address ipv6-address | ipv6-address ipv6-address mac-address mac-address | mac-address mac-address } [ vlan vlan-id ]

undo ipv6 source binding { ipv6-address ipv6-address | ipv6-address ipv6-address mac-address mac-address | mac-address mac-address } [ vlan vlan-id ]

View

Layer 2 Ethernet interface view

Default level

2: System level

Parameters

ipv6-address ipv6-address: Specifies the IPv6 address for the static binding entry. The IPv6 address cannot be an all-zero address, a multicast address, or a loopback address.

mac-address mac-address: Specifies the MAC address for the static binding in the format H-H-H. The MAC address cannot be all 0s, all Fs (a broadcast MAC address), or a multicast MAC address.

vlan vlan-id: Specifies the VLAN for the static binding. vlan-id is the ID of the VLAN to be bound, in the range of 1 to 4094.

Description

Use ipv6 source binding to configure a static IPv6 source guard entry on a port.

Use undo ipv6 source binding to delete a static IPv6 source guard entry from a port.

By default, no static IPv6 binding entry exists on a port.

IP source guard does not use the VLAN information (if specified) in static IPv6 binding entries to filter packets.

When the ND detection function is configured, be sure to specify the VLAN where ND detection is configured in static IPv6 binding entries. Otherwise, ND packets are discarded because they cannot match any static IPv6 binding entry. For more information about the ND detection function, see Security Configuration Guide.

You cannot configure the same static binding entry repeatedly on one port, but you can configure the same static entry on different ports.

You cannot configure a static binding entry on a port that is in an aggregation group.

Related commands: display ipv6 source binding static.

Examples

# Configure a static IPv6 binding entry (IP+MAC binding) on port Ethernet 1/0/1.

<Sysname> system-view
[Sysname] interface ethernet 1/0/1
[Sysname-Ethernet1/0/1] ipv6 source binding ipv6-address 2001::1 mac-address 0002-0002-0002