The Security Optimization Configuration of display security bind ipv6(distributing-mode)

Function

This command is used to query the dynamic binding information of IPv6 addresses after the anti-IPv6 spoofing is enabled. To learn about the binding status of the current device IPv6 address and the user, run this command.

Format

display security bind ipv6 [ frameid/slotid | frameid/slotid/portid [ ontid ] | number ]
display security bind ipv6 service-port service-portid

Parameters

Parameter	Description	Value
frameid/slotid	Indicates the subrack ID and slot ID. Enter a slash (/) between the subrack and slot IDs. To query the information about IPv6 addresses bound to a specified board, use this parameter.	Please see Differences Between Shelves.
frameid/slotid/portid	Indicates the subrack ID, slot ID, and port ID. Enter a slash (/) between the subrack, slot, and port IDs. To query the information about IPv6 addresses bound to a specified port, use this parameter.	Please see Differences Between Shelves.
ontid	Indicates the ONT number. To query the information about IPv6 addresses bound to a specified ONT under a specified port, use this parameter.	Numeral type. Range: varies with the board type.
service-port	Indicates that the information about IPv6 addresses bound to the service ports are queried.	-
service-portid	Indicates that the information about IPv6 addresses bound to the specified service ports are queried.	Numeral type,Range: SCUK/SCUL/SCUN:0-32767. SCUB/SCUF:0-16383. SCUH/SCUV:0-131071. MCUD/MCUD1/MCUE:0-20479.
number	Queries the total number of dynamic binding IPv6 addresses. Only to query the total number of dynamic binding IPv6 addresses, use this parameter.	-

Modes

Privilege mode

Level

Common user level

Usage Guidelines

• You can query the dynamic binding information of IPv6 address only after the anti-IPv6 spoofing is enabled by the security anti-ipv6spoofing command.
• If you do not enter parameter, the system displays the dynamic binding information of all IPv6 addresses in the system.

Example

To query the dynamic binding information about all IPv6 addresses in the system, do as follows:

huawei#display security bind ipv6
   -----------------------------------------------------------------------------
   FlowID BundleID  F/ S/ P   ONT-ID IP-Address
   -----------------------------------------------------------------------------
   0      -         0/ 3/ 0   -      2001:db8::/32
   0      -         0/ 3/ 1   -      2001:db8::1/32
   -----------------------------------------------------------------------------
   Total: 2

To query the dynamic binding information about all IPv6 addresses on service port 0, do as follows:

huawei#display security bind ipv6 service-port 0
  ------------------------------------------------------------------
  FlowID     : 0
  BundleID   : -
  VLAN ID    : 100
  F/S/P      : 0/3/0
  VPI        : 0
  VCI        : 33
  ------------------------------------------------------------------
  User MAC            : 00E0-FC00-0001
  Link Local Address  : 2001:db8::/32
  First IP            : 2001:db8::1/32
  First IP Lease Time : 2011-01-25 00:18:41+08:00
  Second IP           : 2001:db8::2/32
  Second IP Lease Time: 2011-01-25 00:18:41+08:00
  ------------------------------------------------------------------
  Total: 1

To query the dynamic binding information about all IPv6 addresses on service port 6, do as follows:

huawei#display security bind ipv6 service-port 6
  ------------------------------------------------------------------
  FlowID     : 6
  BundleID   : -
  VLAN ID    : 2
  F/S/P      : 0/4/0
  GEM Port ID: 128
  ------------------------------------------------------------------
  User MAC            : 00E0-FC00-0001
  Link Local Address  : 2001:db8::/32
  First IP            : 2001:db8::1/32
  First IP Lease Time : 2011-01-26 01:55:34+08:00
  Second IP           : 2001:db8::2/32
  Second IP Lease Time: 2011-01-26 01:55:34+08:00
  ------------------------------------------------------------------
  Total: 1

To query the total number of dynamic binding IPv6 addresses in the system, do as follows:

huawei#display security bind ipv6 number
  Number of bound IPv6 entries: 2