set ipv6-source-guard verify

The set ipv6-source-guard verify command configures IPv6 source guard filtering item based on specific interface and VLAN.

The delete ipv6-source-guard verify command deletes the configuration.

Command Syntax

set ipv6-source-guard interface <interface-name> vlan <vlan-id> verify <ip | ip+mac>

delete ipv6-source-guard interface <interface-name> vlan <vlan-id> verify

Parameter

Parameter	Description
interface <interface-name>	Specifies an ingress interface name. The value is a physical port or a LAG port, such as ge-1/1/1, te-1/1/2, ae1. Note: IPv6 source guard be enabled on a physical interface or a Link Aggregation Group (LAG) interface but cannot be enabled on the member interfaces of a LAG.
vlan <vlan-id>	Specifies a VLAN ID. The value is an integer that ranges from 1 to 4094. For IPv6 source guard static binding table, specifies the VLAN ID manually configured in IPv6 source guard static binding table. For IPv6 source guard dynamic binding table, specifies the VLAN ID enabled DHCPv6 snooping.
verify <ip \| ip+mac>	Specifies the filtering item based on specific interface and VLAN. The value could be ip or ip+mac. When “ip” is specified, enables IPv6 Source Guard with interface + VLAN + Source IP filtering. When “ip+mac” is specified, enables IPv6 Source Guard with interface + VLAN + Source IP + Source MAC address filtering. The default value is ip, IPv6 Source Guard filtering item is interface + VLAN + Source IP.

Example

Configure IPv6 source guard filtering item based on specific interface and VLAN.

admin@PICOS# set ipv6-source-guard interface te-1/1/3 vlan 20 verify ip+mac
admin@PICOS# commit