393
Tasks at a glance
(Required.)
Enabling IPv6SG on an interface
(Optional.)
Configuring a static IPv6SG binding
Configuring the IPv4SG feature
You cannot configure the IPv4SG feature on a service loopback interface. If IPv4SG is enabled on an
interface, you cannot assign the interface to a service loopback group.
Enabling IPv4SG on an interface
When you enable IPSG on an interface, the static and dynamic IPSG are both enabled.
•
Static IPv4SG uses static bindings configured by using the
ip source binding
command.
•
Dynamic IPv4SG generates dynamic bindings from related source modules. IPv4SG uses the
bindings to filter incoming IPv4 packets based on the matching criteria specified in the
ip verify
source
command.
To implement dynamic IPv4SG, make sure the DHCP snooping or DHCP relay feature operates
correctly on the network.
To enable the IPv4SG feature on an interface:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface interface-type
interface-number
The following interface types are
supported:
•
Layer 2 Ethernet interface.
•
Layer 3 Ethernet interface.
•
Layer 3 Ethernet
subinterface.
•
VLAN
interface.
•
Layer 3 aggregate interface.
3.
Enable the IPv4SG feature.
ip verify source
{
ip-address
|
ip-address
mac-address
|
mac-address
}
By default, the IPv4SG feature is
disabled on an interface.
If you configure this command on
an interface multiple times, the
most recent configuration takes
effect.
Configuring a static IPv4SG binding
You can configure global static and interface-specific static IPv4SG bindings.
Global static bindings take effect on all interfaces.
Interface-specific static bindings take priority over global static bindings. An interface first uses the
static bindings on the interface to match packets. If no match is found, the interface uses the global
bindings.
