Configure Filtered Packet Type of Port IPv6 Source Guard
Configuration Condition
Before configuring the filtered packet type of the port IPv6 Source Guard, first complete the following task:
- Enable the port IPv6 Source Guard function
Configure Filtered Packet Type of Port IPv6 Source Guard
After enabling the port IPv6 Source Guard function, filter the IPv6 packets by the ip mode. When the source IPv6 address and VLAN number in the IPv6 packet received by the port are the same as the source IPv6 address and VLAN number in the port IPv6 Source Guard bound entries, the port forwards the packet. If any one is different, drop it.
After enabling the port IPv6 Source Guard function, filter the IPv6 packet by the ip-mac mode. When the source MAC address, source IPv6 address and VLAN number in the IPv6 packet received by the port are the same as the MAC address, IPv6 address and VLAN number in the port IPv6 Source Guard bound entry, the port forwards the packet. If any one is different, drop it.
After enabling the port IPv6 Source Guard function, filter the IPv6 packet by the mac mode. When the source MAC address and VLAN number in the IPv6 packet received by the port are the same as the MAC address and VLAN number in the port IPv6 Source Guard bound entry, the port forwards the packet. If any one is different, drop it.
Table 5-4 Configure the filtered packet type of the port IPv6 Source Guard
Step
|
Command
|
Description
|
Enter global configuration mode
|
config terminal
|
-
|
Enter the L2 Ethernet interface configuration mode
|
interface interface-name
|
Either
After entering the L2 Ethernet interface configuration mode, the subsequent configuration just takes effect on the current port. After entering the aggregation group configuration mode, the subsequent configuration just takes effect on the aggregation group.
|
Enter the aggregation group configuration mode
|
interface link-aggregation link-aggregation-id
|
Configure the filtered packet type of the port IPv6 Source Guard
|
ipv6 verify source type {ip | ip-mac | mac}
|
Mandatory
By default, the port filters the packets by the ip mode.
|
![note](/storage/images/Document/Maipu/note-icon.jpg)
-
After enabling the port IPv6 Source Guard function, the bound entries of the port IPv6 Source Guard are written to the chip. The number of the entries written to the chip depends on the available chip entry resources. If the chip entry resources are used up and it is necessary to add bound entries or enable the port IPv6 Source Guard function on the other port, we need to delete the related bound entries of some chip entry resources.
- If some port IPv6 Source Guard bound entries cannot written to the chip because the chip entry resources are not enough, the system automatically try to write the bound entries to the chip again every 60s until all the bound entries are written to the chip or deleted.
- Configure port IPv6 source guard filter packet type only valid for dynamic entry generated by DHCPv6 snooping