Question

A network engineer enables IPv6 Source Guard on access port Gi1/0/12 to prevent IPv6 address spoofing. Legitimate hosts on that port acquire addresses via DHCPv6 and are able to communicate normally. However, one server on Gi1/0/12 is manually configured with a static IPv6 address and can no longer send traffic; its packets are being dropped by the switch. The engineer confirms DHCPv6 snooping is enabled and functioning. What is the MOST likely cause of the dropped traffic from the static-address server?

Accepted Answer

The static server has no entry in the IPv6 binding table because it did not learn its address via DHCPv6 or ND, so Source Guard filters its packets

Answer

IPv6 Source Guard requires RA Guard to be disabled on the same port, and the conflict is silently discarding the server's frames

Answer

IPv6 Source Guard only validates traffic sourced from link-local addresses, so global unicast traffic from the server is always dropped

Answer

DHCPv6 snooping automatically removes any manually assigned addresses from the binding table to prevent duplicate address detection failures