Configure Filtered Packet Type of Port IPv6 Source Guard

Configuration Condition

Before configuring the filtered packet type of the port IPv6 Source Guard, first complete the following task:

• Enable the port IPv6 Source Guard function

Configure Filtered Packet Type of Port IPv6 Source Guard

After enabling the port IPv6 Source Guard function, filter the IPv6 packets by the ip mode. When the source IPv6 address and VLAN number in the IPv6 packet received by the port are the same as the source IPv6 address and VLAN number in the port IPv6 Source Guard bound entries, the port forwards the packet. If any one is different, drop it.

After enabling the port IPv6 Source Guard function, filter the IPv6 packet by the ip-mac mode. When the source MAC address, source IPv6 address and VLAN number in the IPv6 packet received by the port are the same as the MAC address, IPv6 address and VLAN number in the port IPv6 Source Guard bound entry, the port forwards the packet. If any one is different, drop it.

After enabling the port IPv6 Source Guard function, filter the IPv6 packet by the mac mode. When the source MAC address and VLAN number in the IPv6 packet received by the port are the same as the MAC address and VLAN number in the port IPv6 Source Guard bound entry, the port forwards the packet. If any one is different, drop it.

Table 5-4 Configure the filtered packet type of the port IPv6 Source Guard

• ---

  After enabling the port IPv6 Source Guard function, the bound entries of the port IPv6 Source Guard are written to the chip. The number of the entries written to the chip depends on the available chip entry resources. If the chip entry resources are used up and it is necessary to add bound entries or enable the port IPv6 Source Guard function on the other port, we need to delete the related bound entries of some chip entry resources.
• If some port IPv6 Source Guard bound entries cannot written to the chip because the chip entry resources are not enough, the system automatically try to write the bound entries to the chip again every 60s until all the bound entries are written to the chip or deleted.
• Configure port IPv6 source guard filter packet type only valid for dynamic entry generated by DHCPv6 snooping

  ---