HP 3600 v2 Series Security Configuration Guide

352
address, the ND packet is discarded. If no entry matches the source IPv6 address, the ND
detection function continues to look up the DHCPv6 snooping table and the ND snooping table.
2. If an exact match is found in either the DHCPv6 snooping or ND snooping table, the ND packet is
forwarded. If no match is found in either table, the packet is discarded. If neither the DHCPv6
snooping table nor the ND snooping table is available, the ND packet is discarded.
NOTE:
• To create IPv6 static bindings with IP source guard, use the ipv6 source binding command. For more
information, see the chapter
“ IP source guard configuration.”
• The DHCPv6 snooping table is created automatically by the DHCPv6 snooping module. For more
information, see
Layer 3—IP Services Configuration Guide .
• The ND snooping table is created automatically by the ND snooping module. For more information, see
Layer 3—IP Services Configuration Guide .
Configuring ND detection
Follow these steps to configure ND detection:
To do… Use the command…
Remarks
Enter system view system-view ––
Enter VLAN view vlan vlan-id ––
Enable ND Detection ipv6 nd detection enable
Required
Disabled by default.
Quit system view quit ––
Enter Layer 2 Ethernet interface view or
Layer 2 aggregate interface view
interface interface-type
interface-number
––
Configure the port as an ND-trusted
port
ipv6 nd detection trust
Optional
A port does not trust sources of
ND packets by default.
NOTE:
ND detection performs source check by using the bindin
g
tables of IP source
g
uard, DHCPv6 snoopin
g
,
and ND snooping. To prevent an ND-untrusted port from discarding legal ND packets in an ND
detection-enabled VLAN, make sure that at least one of the three functions is available.
Displaying and maintaining ND detection
To do… Use the command Remarks
Display the ND detection
configuration
display ipv6 nd detection [ | { begin | exclude |
include } regular-expression ]
Available in any view
Display the statistics of discarded
packets when the ND detection
checks the user legality
display ipv6 nd detection statistics [ interface
interface-type interface-number ] [ | { begin |
exclude | include } regular-expression ]
Available in any view
Clear the statistics by ND
detection
reset ipv6 nd detection statistics [ interface
interface-type interface-number ]
Available in user view

HP 3600 v2 Series Specifications

General

Brand	HP
Model	3600 v2 Series
Category	Switch
Language	English