IPv6 First Hop Security
523 OL-32830-01 Command Line Interface Reference Guide
25
Example
The following example enables the switch to specify 2 as the minimum CGA
security level:
switchxxxxxx(config)#
ipv6 nd inspection sec-level minimum
2
25.29 ipv6 nd inspection validate source-mac
To globally enable checking source MAC address against the link-layer address in
the source/target link-layer option, use the ipv6 nd inspection validate source-mac
command in Global Configuration mode. To disable this function, use the no form
of this command.
Syntax
ipv6 nd inspection validate source-mac
no ipv6 nd inspection validate source-mac
Parameters
N/A
Default Configuration
This command is disabled by default.
Command Mode
Global Configuration mode
User Guidelines
When the switch receives an NDP message, which contains a link-layer address in
the source/target link layer option, the source MAC address is checked against
the link-layer address. Use this command to drop the packet if the link-layer
address and the MAC addresses are different from each other.
To Next Page
Loading...
Need help?
General