Edge-Core ECS3510-10PD, Management Manual

Page: 409 / 1494

C
HAPTER
13
| Security Measures
IPv6 Source Guard
– 409 –
W
EB
I
NTERFACE
To display the binding table for IP Source Guard:
1.
Click Security, IP Source Guard, Dynamic Binding.
2.
Mark the search criteria, and enter the required values.
3.
Click Query
Figure 221: Showing the IPv4 Source Guard Binding Table
IP
V
6 S
OURCE
G
UARD
IPv6 Source Guard is a security feature that filters IPv6 traffic on non-
routed, Layer 2 network interfaces based on manually configured entries in
the IPv6 Source Guard table, or dynamic entries in the Neighbor Discovery
Snooping table or DHCPv6 Snooping table when either snooping protocol is
enabled (see the DHCPv6 Snooping commands). IPv6 source guard can be
used to prevent traffic attacks caused when a host tries to use the IPv6
address of a neighbor to access the network. This section describes how to
configure IPv6 Source Guard.
C
ONFIGURING
P
ORTS
FOR
IP
V
6 S
OURCE
G
UARD
Use the Security > IPv6 Source Guard > Port Configuration page to filter
inbound traffic based on the source IPv6 address stored in the binding
table.
IPv6 Source Guard is used to filter traffic on an insecure port which
receives messages from outside the network or fire wall, and therefore
may be subject to traffic attacks caused by a host trying to use the IPv6
address of a neighbor.
CLI R
EFERENCES
◆
"ipv6 source-guard" on page 935