419
[SwitchB-Ethernet1/0/1] ipv6 verify source ipv6-address mac-address
[SwitchB-Ethernet1/0/1] quit
[SwitchB] interface ethernet 1/0/2
[SwitchB-Ethernet1/0/2] ipv6 verify source ipv6-address mac-address
[SwitchB-Ethernet1/0/2] quit
SAVI configuration in DHCPv6+SLAAC address
assignment scenario
Network requirements
Figure 136 Network diagram
As shown in Figure 136, Switch B connects to the DHCPv6 server through interface Ethernet 1/0/1 and
connects to the DHCPv6 client through interface Ethernet 1/0/3. Host A and Host B access Gateway
(Switch A) through Switch B. Interfaces Ethernet 1/0/1 through Ethernet 1/0/5 on Switch B belong to
VLAN 2. The hosts can obtain IP addresses through DHCPv6 or SLAAC. Configure SAVI on Switch B to
permit only packets from addresses assigned through DHCPv6 and the bound addresses assigned
through SLAAC.
Configuration considerations
Configure Switch B as follows:
1. Enable SAVI.
2. Enable DHCPv6 snooping. For more information about DHCPv6 snooping, see Layer 3—IP
Services Configuration Guide.
3. Enable global unicast address ND snooping and link-local address ND snooping. For more
information about ND snooping, see Layer 3—IP Services Configuration Guide.
4. Enable ND detection in VLAN 2 to check the ND packets arrived on the ports. For more
information about ND detection, see "Configuring ND attack defense."
To Next Page
Loading...
Need help?
General