205NOTE:• You cannot configure the same static binding entry on one interface, but you can configure the samestatic binding entry on different interfaces.• For packet filtering on an interface, IP source guard ignores the VLAN information (if specified) in staticIPv4 source guard binding entries. To cooperate with ARP detection, you must specify the VLAN whereARP detection is configured in static IPv4 source guard binding entries. Otherwise, ARP packets will bediscarded because they cannot match any static IPv4 entry. For more information about the ARPdetection function, seeSecurity Configuration Guide.Configuring the IPv6 source guard functionYou cannot configure the IPv6 source guard function on a service loopback interface. If IPv6 sourceguard is enabled on an interface, you cannot assign the interface to a service loopback group.Enabling IPv6 source guard on an interfaceYou must first enable the IPv6 source guard function on an interface before the interface can use staticIPv6 binding entries to filter packets. For information about how to configure a static IPv6 binding entry,see "Configuring a static IPv6 source guard binding entry on an interface."To enable the IPv6 source guard function on an interface:Step Command Remarks1. Enter system view. system-view N/A2. Enter interface view. interface interface-typeinterface-numberThese types of interfaces aresupported: Ethernet port and VLANinterface.3. Enable the IPv6 source guardfunction.ipv6 verify source ip-address[ mac-address ]By default, the function is disabledon an interface.Configuring a static IPv6 source guard binding entry on aninterfaceStep Command Remarks1. Enter system view. system-view N/A2. Enter interface view. interface interface-typeinterface-numberThese types of interfaces are supported:Layer 2 Ethernet interface, Layer 3 Ethernetport, VLAN interface.
