ZXR102900ESeriesCongurationGuide
ConguringIPv6Layer3Functions
ThecongurationofIPv6Layer3functionsincludesthefollowingcommands:
CommandFunction
zte(cfg-router)#setipv6port<0>vlan<1-4094>
SetsaVLANassociatedwithanIPv6
Layer3interface.
zte(cfg-router)#setipv6port<0>ipv6address{<ipv6Addr/M>|<ipv6Addr
><wildcard>}
SetsanIPv6addressandaddressprex
lengthofanIPv6Layer3interface.
zte(cfg-router)#setipv6port<0>{enable|disable}
EnablesordisablesanIPv6Layer3
interface.
zte(cfg-router)#ipv6routedefault<ipv6Addr>AddsanIPv6staticroute.
zte(cfg-router)#clearipv6port<0>[ipv6address<ipv6Addr/M>]
ClearsIPv6Layer3interface
conguration.
zte(cfg-router)#clearipv6routedefaultClearstheIPv6defaultroute.
showipv6port(allcongurationmodes)
DisplaysIPv6Layer3interface
conguration.
showipv6route(allcongurationmodes)DisplaysIPv6routeconguration.
showipv6port<0>nd(allcongurationmodes)
DisplaysIPv6deviceneighbor
information,similarwiththefunctionof
theshowarpcommandinIPv4.
zte(cfg)#ping6<ipv6Addr>[<0-65535>[<48-1280>[<1-255>[<0-65535>]]]]
Checksnetworkconnectivity,similar
withthefunctionofthepingcommand
inIPv4.
4.18DAIConguration
DAIOverview
BecausesomanyARPmiddle-man-attackshappen,DAI(DynamicARPinspection)is
introducedintheZXR102900E.DAIcheckstheARPpacketreceivedbytheswitch.Ifthe
packetmeetsthecondition,itwillbeforwarded.Otherwiseitwilldropped.
DAIisrelatedtothetrustedstateoftheportoftheswitch.IfARPpacketisreceivedon
thetrustedport,shieldallDAIdetections.IfARPpacketisreceivedonnon-trustedport,
DAIvaliditytestrequirestobepassed.
ConguringDAI
TheDAIcongurationincludesthefollowingcommands:
4-64
SJ-20120409144109-002|2012-07-02(R1.0)ZTEProprietaryandCondential