Zte ZXR10 5250 Series - DAI Configuration; Figure 5-18 Layer-3 Ipv6 Configuration Instance

ZXR105250SeriesCongurationGuide
Layer-3IPv6CongurationInstance
lCongurationDescription
Onaswitch,congureIPv6address12:12::c055:40,bindVLAN300,congurethe
gateway,andsettheportconnectedtothePCtoport10.OnaPC,congureanIPv6
addressandinterfaceroute.SeeFigure5-18.
Figure5-18Layer-3IPv6CongurationInstance
lCongurationProcedure
zte(cfg)#setvlan300enable
zte(cfg)#setvlan300addport10
zte(cfg)#setport10pvid300
zte(cfg)#configroute
zte(cfg-router)#setipv6port0ipv6address12:12::c055:40/128
zte(cfg-router)#setipv6port0vlan300
zte(cfg-router)#setipv6port0enable
zte(cfg-router)#setipv6port0enable
zte(cfg-router)#ipv6routedefault12:12::c055:12
lCongurationVericatio
zte(cfg-router)#showipv6port
IpPortStatusIpv6AddrNumMacAddressVlanIdIpMode
--------------------------------------------------------
0up100.22.93.63.4f.70300static
Usethepingcommandtocheckwhetherthelayer-3portisavailable.
zte(cfg)#ping612:12::c055:40
Replyfrom12:12::c055:40:bytes=48time<1msTTL=64
Replyfrom12:12::c055:40:bytes=48time<1msTTL=64
Replyfrom12:12::c055:40:bytes=48time<1msTTL=64
Replyfrom12:12::c055:40:bytes=48time<1msTTL=64
Replyfrom12:12::c055:40:bytes=48time<1msTTL=64
5.17DAIConguration
DAIOverview
BecausesomanyARPmiddle-man-attackshappen,DynamicARPInspection(DAI)is
introducedintheZXR105250.DAIcheckstheARPpacketreceivedbytheswitch.Ifthe
packetmeetsthecondition,itwillbeforwarded.Otherwiseitwillbedropped.
5-68
SJ-20131111172707-002|2013-11-27(R1.0)ZTEProprietaryandCondential