Supermicro SSE-G2252, User Manual

Page: 351 / 1401

Chapter 13: Security Measures
IPv6 Source Guard
– 358 –
bindings, until the number of entries in the binding table reaches
the newly configured maximum number of allowed bindings.
W
EB
I
NTERFACE
To set the IPv6 Source Guard filter for ports:
1.
Click Security, IPv6 Source Guard, Port Configuration.
2.
Set the required filtering type for each port.
3.
Click Apply
Figure 13-71: Setting the Filter Type for IPv6 Source Guard
C
ONFIGURING
S
TATIC
B
INDINGS FOR
IP
V
6
S
OURCE
G
UARD
Use the Security > IPv6 Source Guard > Static Configuration page to bind
a static address to a port. Table entries include a MAC address, IPv6 global
unicast address, entry type (Static-IPv6-SG-Binding, Dynamic-ND-Binding,
Dynamic-DHCPv6-Binding), VLAN identifier, and port identifier.
CLI R
EFERENCES
•
“ipv6 source-guard binding” on page 870
C
OMMAND
U
SAGE
•
Traffic filtering is based only on the source IPv6 address, VLAN ID, and
port number.
•
Static addresses entered in the source guard binding table are
automatically configured with an infinite lease time.
•
When source guard is enabled, traffic is filtered based upon dynamic
entries learned via ND snooping, DHCPv6 snooping, or static addresses
configured in the source guard binding table.
•
Static bindings are processed as follows:
•
If there is no entry with same and MAC address and IPv6 address, a
new entry is added to binding table using static IPv6 source guard
binding.
•
If there is an entry with same MAC address and IPv6 address, and
the type of entry is static IPv6 source guard binding, then the new
entry will replace the old one.