ipv6 verify source
Use ipv6 verify source to enable IPv6SG on an interface.
Use undo ipv6 verify source to disable IPv6SG on an interface.
Syntax
ipv6 verify source { ip-address | ip-address mac-address | mac-address }
undo ipv6 verify source
Default
The IPv6SG feature is disabled on an interface.
Views
Layer 2 Ethernet interface view
Layer 3 Ethernet interface view
Layer 3 Ethernet subinterface view
VLAN interface view
Predefined user roles
network-admin
mdc-admin
Parameters
ip-address: Filters incoming packets by source IPv6 addresses.
ip-address mac-address: Filters incoming packets by source IPv6 addresses and source MAC addresses.
mac-address: Filters incoming packets by source MAC addresses.
Usage guidelines
After you enable IPv6SG on an interface, this feature uses static and dynamic IPv6SG bindings to match incoming packets on the interface. Packets that match an IPv6SG binding are forwarded and packets that do not match any IPv6SG binding are discarded.
The matching criterion specified by this command applies only to dynamic IPv6SG. Static IPv6SG uses static bindings configured by using the ipv6 source binding command.
You cannot enable dynamic IPv6SG on a service loopback interface.
Examples
# Enable IPv6SG on Layer 2 Ethernet interface FortyGigE 1/0/1 and verify the source IPv6 address and MAC address for dynamic IPv6SG.
<Sysname> system-view [Sysname] interface [Sysname-FortyGigE1/0/1] ipv6 verify source ip-address mac-address
Related commands
display ipv6 source binding
display ipv6 source binding pd