HP 5500 HI Series

413
[SwitchB] interface gigabitethernet 1/0/2
[SwitchB-GigabitEthernet1/0/2] ipv6 verify source ipv6-address mac-address
[SwitchB-GigabitEthernet1/0/2] quit
[SwitchB] interface gigabitethernet 1/0/3
[SwitchB-GigabitEthernet1/0/3] ipv6 verify source ipv6-address mac-address
[SwitchB-GigabitEthernet1/0/3] quit
SAVI configuration in SLAAC-only address
assignment scenario
Network requirements
Figure 136 Network diagram
As shown in Figure 136, Switch A serves as the gateway. Switch B connects Host A and Host B. The hosts
can obtain IPv6 addresses only through SLAAC. Configure SAVI on Switch B to bind the addresses
assigned through SLAAC and permit only packets from the bound addresses.
Configuration considerations
Configure Switch B as follows:
1. Enable SAVI.
2. Enable global unicast address ND snooping and link-local address ND snooping. For more
information about ND snooping, see Layer 3—IP Services Configuration Guide.
3. Enable ND detection in VLAN 10 to check the ND packets arrived on the ports. For more
information about ND detection, see "Configuring ND attack defense."
Switch A
Switch B
Host A Host B
GE1/0/3
Vlan-int10
10::1
Gateway
GE1/0/1
GE1/0/3
GE1/0/2
VLAN 10
10::6
0001-0203-0607
10::5
0001-0203-0405
Internet