Zte ZXR10 2900E Series - DAI Configuration; Figure 5-18 Layer-3 Ipv6 Configuration Instance

Chapter5ServiceConguration
Figure5-18Layer-3IPv6CongurationInstance
lCongurationProcedure
zte(cfg)#setvlan300enable
zte(cfg)#setvlan300addport10
zte(cfg)#setport10pvid300
zte(cfg)#configroute
zte(cfg-router)#setipv6port0ipv6address12:12::c055:40/128
zte(cfg-router)#setipv6port0vlan300
zte(cfg-router)#setipv6port0enable
zte(cfg-router)#setipv6port0enable
zte(cfg-router)#ipv6routedefault12:12::c055:12
lCongurationVericatio
zte(cfg-router)#showipv6port
IpPortStatusIpv6AddrNumMacAddressVlanIdIpMode
--------------------------------------------------------
0up100.22.93.63.4f.70300static
Usethepingcommandtocheckwhetherthelayer-3portisavailable.
zte(cfg)#ping612:12::c055:40
Replyfrom12:12::c055:40:bytes=48time<1msTTL=64
Replyfrom12:12::c055:40:bytes=48time<1msTTL=64
Replyfrom12:12::c055:40:bytes=48time<1msTTL=64
Replyfrom12:12::c055:40:bytes=48time<1msTTL=64
Replyfrom12:12::c055:40:bytes=48time<1msTTL=64
5.17DAIConguration
DAIOverview
BecausesomanyARPmiddle-man-attackshappen,DynamicARPInspection(DAI)is
introducedintheZXR102900E.DAIcheckstheARPpacketreceivedbytheswitch.Ifthe
packetmeetsthecondition,itwillbeforwarded.Otherwiseitwillbedropped.
DAIisrelatedtothetrustedstateoftheportoftheswitch.IfanARPpacketisreceived
onatrustedport,shieldallDAIdetections.IfanARPpacketisreceivedonanon-trusted
port,itmustpasstheDAIvaliditytest.
ConguringDAI
TheDAIcongurationincludesthefollowingcommands:
5-69
SJ-20130731155059-002|2013-11-27(R1.0)ZTEProprietaryandCondential