R0106-HP MSR Router Series Security Configuration Guide(V7)

401
[Device] ipv6 dhcp snooping enable
# Configure GigabitEthernet 2/1/2 as a trusted interface.
[Device] interface gigabitethernet 2/1/2
[Device-GigabitEthernet2/1/2] ipv6 dhcp snooping trust
[Device-GigabitEthernet2/1/2] quit
2. Enable IPv6 source guard:
# Enable IPv6 source guard on GigabitEthernet 2/1/1 and verify the source IP address and MAC
address for dynamic IPv6 source guard.
[Device] interface gigabitethernet 2/1/1
[Device-GigabitEthernet2/1/1] ipv6 verify source ip-address mac-address
# Enable recording of client information in DHCPv6 snooping entries on GigabitEthernet 2/1/1.
[Device-GigabitEthernet2/1/1] ipv6 dhcp snooping binding record
[Device-GigabitEthernet2/1/1] quit
Verifying the configuration
# Display dynamic IPv6 source guard binding entries on the device.
[Device] display ipv6 source binding dhcpv6-snooping
Total entries found: 1
IPv6 Address MAC Address Interface VLAN Type
2001::1 040a-0000-0001 GE2/1/1 1 DHCPv6 snooping
The output shows that a dynamic IPv6 source guard binding entry is generated based on a DHCPv6
snooping entry.