R0106-HP MSR Router Series Security Configuration Guide(V7)

396
Configuring a static IPv6 source guard binding entry on an
interface
When you configure a static IPv6 source guard binding entry on an interface, follow these guidelines:
• To configure a static IPv6 binding entry for the ND detection function, the vlan vlan-id option must
be specified, and ND detection must be enabled for the specified VLAN.
• You can configure the same static IPv6 source guard binding entry on different interfaces.
• The maximum number of static IPv6 source guard binding entries on a Layer 2 interface varies by
hardware:
{ MSR routers installed with the Layer 2 switching module HMIM-24GSW/24GSWP or
HMIM-8GSW: 384
To configure a static IPv6 source guard binding entry on an interface:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter interface view.
interface interface-type
interface-number
Only Layer 2 Ethernet ports are supported.
3. Configure a static IPv6
source guard binding
entry.
ipv6 source binding { ip-address
ipv6-address | ip-address
ipv6-address mac-address
mac-address | mac-address
mac-address } [ vlan vlan-id ]
By default, no static IPv6 source guard
binding entry is configured on an interface.
Displaying and maintaining IP source guard
Execute display commands in any view and reset commands in user view.
For IPv4 source guard:
Task Command
Display IPv4 source guard
binding entries
(MSR2000/MSR3000).
display ip source binding [ static | [ vpn-instance vpn-instance-name ]
[ dhcp-relay | dhcp-server | dhcp-snooping | dot1x ] ] [ ip-address ip-address ]
[ mac-address mac-address ] [ vlan vlan-id ] [ interface interface-type
interface-number ]
Display IPv4 source guard
binding entries
(MSR4000).
display ip source binding [ static | [ vpn-instance vpn-instance-name ]
[ dhcp-relay | dhcp-server | dhcp-snooping | dot1x ] ] [ ip-address ip-address ]
[ mac-address mac-address ] [ vlan vlan-id ] [ interface interface-type
interface-number ] [ slot slot-number ]
For IPv6 source guard:
Task Command
Display IPv6 source guard
binding entries
(MSR2000/MSR3000).
display ipv6 source binding [ static | [ vpn-instance vpn-instance-name ]
[ dhcpv6-snooping ] ] [ ip-address ipv6-address ] [ mac-address mac-address ]
[ vlan vlan-id ] [ interface interface-type interface-number ]