Dasan V5808 - Page 238

UMN:CLI User Manual
V5808
238
X:X::X:X: sender IPv6 address
X:X::X:X/M: sender IPv6 network address
MACADDR: sender MAC address
deny ipv6 {host X:X::X:X |
X:X::X:X/M | any} mac pattern
WORD offset <0-5>
Discards ND packets based on their IPv6 address and
MAC pattern, which have not learned before on ND
inspection table.
ipv6 any: ignores sender IPv6 address
host: sender host
X:X::X:X: sender IPv6 address
X:X::X:X/M: sender IPv6 network address
WORD: sender MAC pattern value
0-5: offset value
deny ipv6 range X:X::X:X
X:X::X:X mac any
Discards ND packets of a given range of IPv6
addresses.
X:X::X:X: start/end IPv6 address of sender
To delete the configured IPv6 address and MAC address for discarding ND packets, use
the following command.
Command
Mode
Description
no deny ipv6 {host X:X::X:X |
X:X::X:X/M | any} mac {any | host
MACADDR}
ND-ACL
Deletes a configured range of IP address to discard ND
packets.
any: ignores sender MAC address
host: sender host
MACADDR: sender MAC address
X:X::X:X: start/end IPv6 address of sender
X:X::X:X/M: sender IPv6 network address
no deny ipv6 {host X:X::X:X |
X:X::X:X/M | any} mac pattern
WORD offset <0-5>
no deny ipv6 range X:X::X:X
X:X::X:X mac any
By the following command, the ND access list also refers to a DHCP snooping binding
table to permit the ND packets for DHCP users. This feature enables the system to permit
ND packets only for the IPv6 addresses on the DHCP snooping binding table. The ND
access list with the DHCP snooping allows IP communications to users authorized by the
DHCP snooping. The source IP address and MAC address of each packet are checked
against the table, and if a valid match is not found, the packet is dropped.
To permit/discard ND packets for the users authorized by the DHCPv6 snooping, use the
following command.
Command
Mode
Description
permit dhcpv6-snoop-inspection
ND-ACL
Permits ND packets of users authorized by the
DHCPv6 snooping.
no permit dhcpv6-snoop-
inspection
Discards the configured ND packets of users
authorized by the DHCPv6 snooping.
To display the configured ND access lists, use the following command.