286
ND detection configuration example
Network requirements
As shown in Figure 90, Host A and Host B connect to Switch A, the gateway, through Switch B. Host A
has the IPv6 address 10::5 and MAC address 0001-0203-0405. Host B has the IPv6 address 10::6 and
MAC address 0001-0203-0607.
Enable ND detection on Switch B to filter out forged ND packets.
Figure 90 Network diagram for ND detection configuration
10::5
0001-0203-0405
Switch A
Switch B
Host A Host B
GE1/0/3
Vlan-int10
10::1
Gateway
GE1/0/1
GE1/0/3
GE1/0/2
VLAN 10
ND snooping
10::6
0001-0203-0607
Internet
Configuration procedure
1. Configuring Switch A
# Enable IPv6 forwarding.
<SwitchA> system-view
[SwitchA] ipv6
# Create VLAN 10.
[SwitchA] vlan 10
[SwitchA-vlan10] quit
# Assign port GigabitEthernet 1/0/3 to VLAN 10.
[SwitchA] interface GigabitEthernet 1/0/3
[SwitchA-GigabitEthernet1/0/3] port link-type trunk
[SwitchA-GigabitEthernet1/0/3] port trunk permit vlan 10
[SwitchA-GigabitEthernet1/0/3] quit
# Assign an IPv6 address to VLAN-interface 10.
[SwitchA] interface vlan-interface 10
[SwitchA-Vlan-interface10] ipv6 address 10::1/64
To Next Page
Loading...
Need help?
General