Configuration Guide Configuring IPv6
You can configure the maximum number of ND options to prevent forged ND packets from carrying unlimited ND
options and occupying excessive CPU space on the device.
Maximum Number of Neighbor Learning Entries on an Interface
You can configure the maximum number of neighbor learning entries on an interface to prevent neighbor learning
attacks from occupying ND entries and memory space of the device and affecting forwarding efficiency of the device.
Related Configuration
Enabling IPv6 Redirection
By default, ICMPv6 Redirect packets can be sent on IPv6 interfaces.
Run the no ipv6 redirects command in interface configuration mode to prohibit an interface from sending Redirect
packets.
Configuring IPv6 DAD
By default, an interface sends one NS packet to perform IPv6 DAD.
Run the ipv6 nd dad attempts value command in interface configuration mode to configure the number of NS
packets consecutively sent by DAD. Value 0 indicates disabling DAD for IPv6 addresses on this interface.
Run the no ipv6 nd dad attempts command to restore the default configuration.
By default, the device performs DAD on duplicate IPv6 addresses every 60 seconds.
Run the ipv6 nd dad retry value command in global configuration mode to configure the DAD interval. Value 0
indicates disabling DAD for the device.
Run the no ipv6 nd dad retry command to restore the default configuration.
Configuring the Reachable Time of a Neighbor
The default reachable time of an IPv6 neighbor is 30s.
Run the ipv6 nd reachable-time milliseconds command in interface configuration mode to modify the reachable
time of a neighbor.
Configuring the Stale Time of a Neighbor
The default stale time of an IPv6 neighbor is 1 hour. After the time elapses, the device performs NUD.
Run the ipv6 nd stale-time seconds command in interface configuration mode to modify the stale time of a
neighbor.
Configuring Prefix Information
By default, the prefix in an RA packet on an interface is the prefix configured in the ipv6 address command on the
interface.
Run the ipv6 nd prefix command in interface configuration mode to add or delete prefixes and prefix parameters
that can be advertised.
Enabling/disabling RA Suppression
To Next Page
Loading...
Need help?
General
