308
Examples
# Enable ND detection in VLAN 10.
<Sysname> system-view
[Sysname] vlan 10
[Sysname-vlan 10] ipv6 nd detection enable
ipv6 nd detection trust
Syntax
ipv6 nd detection trust
undo ipv6 nd detection trust
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
None
Description
Use the ipv6 nd detection trust command to configure a port as an ND-trusted port.
Use the undo ipv6 nd detection trust command to configure a port as an ND-untrusted port.
By default, a port is ND-untrusted. In an ND detection-enabled VLAN, ports are assigned two roles:
ND-trusted and ND-untrusted.
• On an ND-trusted port, the ND detection function does not check ND packets for address spoofing.
• On an ND-untrusted port, RA and RR messages are considered illegal and discarded directly; all
other ND packets in the VLAN are checked for source spoofing.
Examples
# Configure Layer 2 interface GigabitEthernet1/0/1 as an ND-trusted port.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] ipv6 nd detection trust
# Configure interface Bridge-Aggregation 1 as an ND-trusted port.
<Sysname> system-view
[Sysname] interface bridge-Aggregation 1
[Sysname-Bridge-Aggregation1] ipv6 nd detection trust
reset ipv6 nd detection statistics
Syntax
reset ipv6 nd detection statistics [ interface interface-type interface-number ]
View
User view
To Next Page
Loading...
Need help?
General