When you need to filter inbound traffic, you can use source guard. Find out its various uses and limitations in this video.
- [Instructor] The final IP version six security feature … that you want to be able to describe … in this section of the blueprint … is IP version six Source Guard. … This allows you to filter inbound traffic … on layer two switch ports that are not found … in the IP version six snooping binding table. … We mentioned this table in regard to IP version six … neighbor discovery inspection … where the table learns and stores information … related to IP version six addresses, … Mac addresses, VLAN, and interface numbers. … With IP version six Source Guard, though, … this only examines the snooping table information … and it does not add to or update the table in any way. … That's why you would use IP version six snooping … in conjunction with IP version six Source Guard … so that you can help fill up the binding table … with relevant information. … So it's important to distinguish the fact … that IP version six Source Guard … does not inspect the NDP messages … as IP version six snooping does. …
This course was created by Kevin Wallace Training. We are pleased to offer this training in our library.
- MPLS overview
- DMVPN overview
- AAA troubleshooting
- IPv6 traffic filters
- Control plane policing
- IPV6 neighbor discovery inspection
- IPv4 ACL troubleshooting