R0106-HP MSR Router Series Security Command Reference(V7)

520
Dynamic IPv6 source guard obtains information from DHCPv6 snooping entries to generate dynamic
binding entries, and uses the entries to filter incoming packets based on the matching criteria. The
matching criteria specified in the ipv6 verify source command takes effect on only dynamic IPv6 source
guard.
Static IPv6 source guard filters incoming packets by all matching criteria in a static binding entry. To
configure a static IPv6 source guard binding, use the ipv6 source binding command.
If a packet matches an IPv6 source guard binding entry, IP source guard forwards the packet. Otherwise,
it drops the packet.
Examples
# Enable IPv6 source guard on Layer 2 Ethernet interface GigabitEthernet 2/1/1 and verify the source
IPv6 address and MAC address for dynamic IPv6 source guard.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] ipv6 verify source ip-address mac-address
Related commands
display ipv6 source binding