InformationPort locking prevents ARP and IP spoofing by VM guests. Without it, one guest could impersonate another on the host. This setting lists the allowed IP addresses available for the VM using this virtual interface. If the network default-locking-mode is set to 'locked', a VM that tries to use an address that is not on its allowed list will not be able to send or receive network traffic.
SolutionSet the list of allowed addresses for a virtual interface by running the following commands:
xe vif-param-add uuid=<vif-uuid> ipv6-allowed=<comma separated list of ipv6-addresses>
NOTE: This setting is only effective if the network default-locking-mode or vif locking-mode is set to 'locked'.