Enabling IPv6SG on an interface
About the IPv6SG feature on an interface
When you enable IPv6SG on an interface, the static and dynamic IPv6SG are both enabled.
Static IPv6SG uses static bindings configured by using the ipv6 source binding command. For more information, see "Configuring a static IPv6SG binding."
Dynamic IPv6SG generates dynamic bindings from related source modules. IPv6SG uses the bindings to filter incoming IPv6 packets based on the matching criteria specified in the ipv6 verify source command.
Restrictions and guidelines
To implement dynamic IPv6SG, make sure DHCPv6 snooping, DHCPv6 relay agent, or ND snooping operates correctly on the network.
Procedure
Enter system view.
system-view
Enter interface view.
interface interface-type interface-number
The following interface types are supported:
Layer 2 Ethernet interface.
Layer 3 Ethernet interface.
VLAN interface.
Enable the IPv6SG feature.
ipv6 verify source { ip-address | ip-address mac-address | mac-address }
By default, the IPv6SG feature is disabled on an interface.