What data structure does IPv6 Source Guard consult to validate and forward IPv6 source addresses?

IPv6 Source Guard uses the Binding Table to validate and forward IPv6 source addresses. The Binding Table is populated with information learned from DHCP snooping or static configurations, associating an IPv6 address with a MAC address and the ingress port. When a packet arrives, IPv6 Source Guard checks if the source IPv6 address and MAC address match an entry in the Binding Table for that specific port. If there's no match, the packet is dropped, preventing spoofing. ACLs (Access Control Lists) and ACEs (Access Control Entries) are used for general packet filtering based on various criteria, not specifically for source address validation against learned bindings. DHCP is a protocol used to assign IP addresses, but the Binding Table is the data structure that stores the learned information for Source Guard.