{"type":"doc","content":[{"type":"paragraph","content":[{"text":"The","type":"text"},{"text":" set ipv6-source-guard binding ip ","type":"text","marks":[{"type":"strong"}]},{"text":"command configures a static IPv6 source guard binding entry.","type":"text"}]},{"type":"paragraph","content":[{"text":"The ","type":"text"},{"text":"delete ipv6-source-guard binding ip","type":"text","marks":[{"type":"strong"}]},{"text":" command deletes the configuration.","type":"text"}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"Command Syntax","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"set ipv6-source-guard binding ip","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"","type":"text","marks":[{"type":"em"}]},{"text":" ","type":"text"},{"text":"mac ","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"interface","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"","type":"text","marks":[{"type":"em"}]},{"text":" ","type":"text"},{"text":"vlan","type":"text","marks":[{"type":"strong"}]},{"text":" <","type":"text"},{"text":"vlan-id","type":"text","marks":[{"type":"em"}]},{"text":">","type":"text"}]},{"type":"paragraph","content":[{"text":"delete ipv6-source-guard binding ip","type":"text","marks":[{"type":"strong"}]},{"text":"","type":"text","marks":[{"type":"em"}]},{"text":" [","type":"text"},{"text":"mac ","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"interface","type":"text","marks":[{"type":"strong"}]},{"text":"","type":"text","marks":[{"type":"em"}]},{"text":"vlan","type":"text","marks":[{"type":"strong"}]},{"text":" <","type":"text"},{"text":"vlan-id","type":"text","marks":[{"type":"em"}]},{"text":">]","type":"text"}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"Parameter","type":"text","marks":[{"type":"strong"}]}]},{"type":"table","attrs":{"layout":"default","width":760.0,"localId":"d0c78d8f-98b6-4734-925d-b394bcdcc46f"},"content":[{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"background":"var(--ds-background-accent-gray-subtlest,#f0f0f0)","rowspan":1,"colwidth":[234.0]},"content":[{"type":"paragraph","content":[{"text":"Parameter","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"background":"var(--ds-background-accent-gray-subtlest,#f0f0f0)","rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[234.0]},"content":[{"type":"paragraph","content":[{"text":"ip","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"","type":"text","marks":[{"type":"em"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Specifies a source IPv6 address for the static binding entry. The IPv6 address should be an unicast address.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[234.0]},"content":[{"type":"paragraph","content":[{"text":"mac ","type":"text","marks":[{"type":"strong"}]},{"text":"","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Specifies a source MAC address for the static binding entry. The value is in the format of H:H:H:H:H:H. An H contains 2 hexadecimal numbers, and cannot be all 0s, all Fs (a broadcast address), or a multicast address.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[234.0]},"content":[{"type":"paragraph","content":[{"text":"interface","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"","type":"text","marks":[{"type":"em"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Specifies ingress interface name for the static binding entry. The value is a physical port or a LAG port, such as ge-1/1/1, te-1/1/2, ae1.","type":"text"}]},{"type":"paragraph","content":[{"text":"Note","type":"text","marks":[{"type":"strong"}]},{"text":":","type":"text"}]},{"type":"paragraph","content":[{"text":"IPv6 source guard be enabled on a physical interface or a Link Aggregation Group (LAG) interface but cannot be enabled on the member interfaces of a LAG.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[234.0]},"content":[{"type":"paragraph","content":[{"text":"vlan","type":"text","marks":[{"type":"strong"}]},{"text":" <","type":"text"},{"text":"vlan-id","type":"text","marks":[{"type":"em"}]},{"text":">","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[526.0]},"content":[{"type":"paragraph","content":[{"text":"Specifies the VLAN ID. The value is an integer that ranges from 1 to 4094.","type":"text"}]}]}]}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"Usage Guidelines","type":"text","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"text":"In IPv6 Source Guard, static binding entries involve manually associating IP addresses with specific interfaces on a network device. IPv6 Source Guard allows only traffic with matching source IP addresses and source MAC addresses to pass through the specified interface, thereby enhancing network security by preventing IP address spoofing attacks.","type":"text"}]},{"type":"paragraph","content":[{"text":"NOTE","type":"text","marks":[{"type":"strong"}]},{"text":":","type":"text"}]},{"type":"paragraph","content":[{"text":"In the following example, a static IPv6 source guard binding entry is configured on the device. When attempting to delete this entry, an error occurs.","type":"text"}]},{"type":"codeBlock","content":[{"text":"set ipv6-source-guard binding ip 100::6 mac 00:00:00:00:00:01 interface ge-1/1/1 vlan 10\n\nadmin@PICOS# delete ipv6-source-guard binding ip 100::6 mac 00:00:00:00:00:01 interface ge-1/1/1 vlan 10\nDeleting:\n 10\nOK\nadmin@PICOS# commit\nIPSG6: vlan is required for ip 100::6, mac 00:00:00:00:00:01, interface ge-1/1/1\nCommit failed.\n\nadmin@PICOS# delete ipv6-source-guard binding ip 100::6 mac 00:00:00:00:00:01\nDeleting:\n 00:00:00:00:00:01 {\n interface \"ge-1/1/1\" {\n vlan 10\n }\n } \nOK\nadmin@PICOS# commit\nIPSG6: mac is required for ip 100::6\nCommit failed.","type":"text"}]},{"type":"paragraph","content":[{"text":"This is typically caused by the following two reasons:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Due to the hierarchy structure design of PICOS CLI, when performing a deletion operation, the specified level and all its subordinate levels (i.e., the parameters and subsequent parameters in the command line) will be deleted, while the upper-level hierarchy (i.e., the parameters before the command line) will not be deleted.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the configuration of a static IPv6 source guard binding entry, the command ","type":"text"},{"text":"set ipv6-source-guard binding ip","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"","type":"text","marks":[{"type":"em"}]},{"text":" ","type":"text"},{"text":"mac ","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"interface","type":"text","marks":[{"type":"strong"}]},{"text":" ","type":"text"},{"text":"","type":"text","marks":[{"type":"em"}]},{"text":" ","type":"text"},{"text":"vlan","type":"text","marks":[{"type":"strong"}]},{"text":" <","type":"text"},{"text":"vlan-id","type":"text","marks":[{"type":"em"}]},{"text":"> requires all four parameters: IP address, MAC address, interface name, and VLAN ID, to be configured.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"For this type of deletion error, you can complete the deletion configuration by removing the first hierarchy level ","type":"text"},{"text":"ipv6-source-guard binding ip","type":"text","marks":[{"type":"strong"}]},{"text":".","type":"text"}]},{"type":"codeBlock","content":[{"text":"admin@PICOS# delete ipv6-source-guard binding ip 100::6\nDeleting:\n 100::6 {\n mac 00:00:00:00:00:01 {\n interface \"ge-1/1/1\" {\n vlan 10\n }\n }\n }\nOK\n\nadmin@PICOS# commit\nCommit OK.\nSave done.","type":"text"}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"Example","type":"text","marks":[{"type":"strong"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Configure a static IPv6 source guard binding entry manually.","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"admin@PICOS# set ipv6-source-guard binding ip 100::6 mac 22:22:22:11:11:11 interface ge-1/1/3 vlan 40\nadmin@PICOS# commit","type":"text"}]}],"version":1}

Browser not supported