R0106-HP MSR Router Series Security Command Reference(V7)

519
mac-address mac-address: Specifies a MAC address for the static binding entry. The MAC address must
be in H-H-H format, and cannot be all 0s, all Fs (a broadcast address), or a multicast address.
vlan vlan-id: Specifies a VLAN ID for the static binding entry. The value range is 1 to 4094.
Usage guidelines
IP source guard can use static IPv6 source guard binding entries on an interface to implement the
following functions:
• Filter incoming IPv6 packets on the interface.
• Check user validity by cooperating with the ND detection feature.
The maximum number of static IPv6 source guard binding entries on a Layer 2 interface varies by
hardware:
MSR routers installed with the Layer 2 switching module HMIM-24GSW/24GSWP or HMIM-8GSW: 384
Examples
# Bind IPv6 address 2001::1 and MAC address 0002-0002-0002 to form a static IPv6 source guard
binding entry on GigabitEthernet 2/1/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] ipv6 source binding ip-address 2001::1 mac-address
0002-0002-0002
Related commands
display ipv6 source binding
ipv6 verify source
Use ipv6 verify source to enable the IPv6 source guard function.
Use undo ipv6 verify source to restore the default.
Syntax
ipv6 verify source { ip-address | ip-address mac-address | mac-address }
undo ipv6 verify source
Default
The IPv6 source guard function is disabled on an interface.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
Parameters
ip-address: Filters incoming packets by source IPv6 addresses.
ip-address mac-address: Filters incoming packets by source IPv6 addresses and source MAC addresses.
mac-address: Filters incoming packets by source MAC addresses.
Usage guidelines
This command enables both static and dynamic IPv6 source guard on the interface.