Enabling IPv6SG on an interface
When you enable IPv6SG on an interface, the static and dynamic IPv6SG are both enabled.
Static IPv6SG uses static bindings configured by using the ipv6 source binding command.
Dynamic IPv6SG generates dynamic bindings from related source modules. IPv6SG uses the bindings to filter incoming IPv6 packets based on the matching criteria specified in the ipv6 verify source command.
To implement dynamic IPv6SG, make sure DHCPv6 snooping or WLAN snooping operates correctly on the network.
To enable the IPv6SG feature on an interface:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter Layer 2 Ethernet interface view. | interface interface-type interface-number | N/A |
3. Enable the IPv6SG feature. | ipv6 verify source { ip-address | ip-address mac-address | mac-address } | By default, the IPv6SG feature is disabled on an interface. If you configure this command on an interface multiple times, the most recent configuration takes effect. |