ECS4110-28P_Management Guide

C HAPTER 13 | Security Measures
IPv6 Source Guard
– 406 –
WEB INTERFACE
To display the binding table for IP Source Guard:
1. Click Security, IP Source Guard, Dynamic Binding.
2. Mark the search criteria, and enter the required values.
3. Click Query
Figure 219: Showing the IPv4 Source Guard Binding Table
IPV6 SOURCE GUARD
IPv6 Source Guard is a security feature that filters IPv6 traffic on non-
routed, Layer 2 network interfaces based on manually configured entries in
the IPv6 Source Guard table, or dynamic entries in the Neighbor Discovery
Snooping table or DHCPv6 Snooping table when either snooping protocol is
enabled (see the DHCPv6 Snooping commands). IPv6 source guard can be
used to prevent traffic attacks caused when a host tries to use the IPv6
address of a neighbor to access the network. This section describes how to
configure IPv6 Source Guard.
CONFIGURING PORTS
FOR
IPV6 SOURCE
GUARD
Use the Security > IPv6 Source Guard > Port Configuration page to filter
inbound traffic based on the source IPv6 address stored in the binding
table.
IPv6 Source Guard is used to filter traffic on an insecure port which
receives messages from outside the network or fire wall, and therefore
may be subject to traffic attacks caused by a host trying to use the IPv6
address of a neighbor.
CLI REFERENCES
◆ "ipv6 source-guard" on page 945