UMN:CLI User Manual
V8102
288
no ipv6 nd inspection log-buffer
{entries | logs}
Deletes the configured options of log-buffer function.
To display the configured log-buffer function and entries’ information, use the following
command.
show ipv6 nd inspection log
Displays the configured log-buffer function.
To clear all of collected entries in the list, use the following command.
clear ipv6 nd inspection log
Clears all of collected entries in the log-buffer list.
8.2.10.5 ND Inspection Delay Time
This function sets the time before ND inspection starts to run. Before setting this feature,
ND inspection should be enabled. ND inspection checks validity of incoming ND packets
by using DHCP snooping binding table and denies the ND packets if they are not identi-
fied in the table.
However, the V8102 may be rebooted with any reason, then DHCP snooping binding ta-
ble entries, which are dynamically learned from DHCP packets back and forth the V8102,
would be lost. Thus, ND inspection should be delayed to start during some time so that
DHCP snooping table can build entries. If no time is given, ND inspection sees empty
snooping table and drop every ND packet.
To specify the ND inspection delay time, use the following command.
ipv6 dhcp snooping nd-
inspection start <1-2147483637>
Configures the ND inspection delay time. If reboot, ND
inspection resumes after the time you configure.
1-2147483637: delay time (unit: second, default:1800
seconds)
no ipv6 dhcp snooping nd-
inspection start
Deletes the configured ND inspection delay time.
8.2.10.6 ND RA Guard
The IPv6 RA Guard feature provides support for allowing the network administrator to
block or reject unwanted or rogue router advertisement (RA) guard messages that arrive
at the network device.
To set a trust state on a port for the ND inspection, use the following command.
To Next Page
Loading...