Configuration Guide Configuring IPv6
Optional.
If the number of IPv6 hosts is controllable, run the ipv6 nd cache interface-limit command to restrict the number of
neighbors learned on an interface. This prevents ND learning attacks from occupying the memory space and
affecting device performance.
Verification
Run the following commands to check whether the configuration is correct:
show ipv6 interface interface-type interface-num: Check whether the configurations such as the redirection function,
reachable time of a neighbor, and NS sending interval take effect.
show ipv6 interface interface-type interface-num ra-inifo: Check whether the prefix and other information
configured for RA packets are correct.
show run
Related Commands
Enabling IPv6 Redirection on an Interface
Interface configuration mode
All ICMPv6 error messages are transmitted at a limited transmission rate. By default, a maximum
number of 10 ICMPv6 error messages are transmitted per second (10 pps).
Configuring the Number of Consecutive NS Packets Sent During DAD
ipv6 nd dad attempts value
value: Indicates the number of NS packets.
Interface configuration mode
You need to enable DAD before configuring an IPv6 address on an interface. Then the address is in
tentative state. If no address conflict is detected by DAD, this address can be correctly used. If an
address conflict is detected and the interface ID of this address uses EUI-64, duplicate link-layer
addresses exist on this link. In this case, the system automatically disables this interface to prevent
IPv6-related operations on this interface). At the time, you must configure a new address and restart the
interface to re-enable DAD. When an interface changes from the down state to the up state, DAD is
re-enabled for the addresses on this interface.
Configuring the Reachable Time of a Neighbor
ipv6 nd reachable-time milliseconds
milliseconds: Indicates the reachable time of a neighbor, ranging from 0 to 3,600,000. The unit is
millisecond. The default value is 30s.
Interface configuration mode