Savi Configuration In Dhcpv6+Slaac Address Assignment Scenario; Network Requirements; Configuration Considerations - HP 3600 v2 Series Configuration Manual
Hide thumbs
Also See for 3600 v2 Series:
- Command reference manual (510 pages) ,
- Configuration manual (441 pages) ,
- Security configuration manual (398 pages)
Table of Contents
Advertisement
[SwitchB-Ethernet1/0/1] ipv6 verify source ipv6-address mac-address
[SwitchB-Ethernet1/0/1] quit
[SwitchB] interface ethernet 1/0/2
[SwitchB-Ethernet1/0/2] ipv6 verify source ipv6-address mac-address
[SwitchB-Ethernet1/0/2] quit
SAVI configuration in DHCPv6+SLAAC address
assignment scenario
Network requirements
Figure 136 Network diagram
As shown in
connects to the DHCPv6 client through interface Ethernet 1/0/3. Host A and Host B access Gateway
(Switch A) through Switch B. Interfaces Ethernet 1/0/1 through Ethernet 1/0/5 on Switch B belong to
VLAN 2. The hosts can obtain IP addresses through DHCPv6 or SLAAC. Configure SAVI on Switch B to
permit only packets from addresses assigned through DHCPv6 and the bound addresses assigned
through SLAAC.
Configuration considerations
Configure Switch B as follows:
1.
Enable SAVI.
2.
Enable DHCPv6 snooping. For more information about DHCPv6 snooping, see Layer 3—IP
Services Configuration Guide.
3.
Enable global unicast address ND snooping and link-local address ND snooping. For more
information about ND snooping, see Layer 3—IP Services Configuration Guide.
4.
Enable ND detection in VLAN 2 to check the ND packets arrived on the ports. For more
information about ND detection, see
Figure
136, Switch B connects to the DHCPv6 server through interface Ethernet 1/0/1 and
"Configuring ND attack
419
defense."
Advertisement
Table of Contents
Troubleshooting
