HP A5120 EI Series Configuration Manual page 130

To do...
Configure the interface to
generate an EUI-64 IPv6
address
Manual configuration
Follow these steps to specify an IPv6 address manually for an interface:
To do...
Enter system view
Enter interface view
Configure an IPv6 address
manually
Stateless address autoconfiguration
Follow these steps to configure an interface to generate an IPv6 address by using stateless address
autoconfiguration:
To do...
Enter system view
Enter interface view
Configure an IPv6 address to be
generated through stateless
address autoconfiguration
NOTE:
Using the undo ipv6 address auto command on an interface will remove all IPv6 global unicast
addresses automatically generated on the interface.
With stateless address autoconfiguration enabled on an interface, the switch automatically generates an
IPv6 global unicast address by using the address prefix information in the received RA message and the
interface ID. On an IEEE 802 interface (such as a VLAN interface), the interface ID is generated based
on the MAC address of the interface, and is globally unique. As a result, the interface ID portion of the
IPv6 global address remains unchanged and thus exposes the sender. An attacker can further exploit
communication details such as the communication peer and time.
To fix the vulnerability, configure the temporary address function that enables the system to generate and
use temporary IPv6 addresses with different interface ID portions on an interface. With this function
configured on an IEEE 802 interface, the system can generate two addresses, public IPv6 address and
temporary IPv6 address.
Public IPv6 address: Comprises an address prefix provided by the RA message, and a fixed

interface ID generated based on the MAC address of the interface.
Use the command...
ipv6 address ipv6-address/prefix-
length eui-64
Use the command...
system-view
interface interface-type interface-
number
ipv6 address { ipv6-address
prefix-length | ipv6-
address/prefix-length }
Use the command...
system-view
interface interface-type
interface-number
ipv6 address auto
122
Remarks
Required
By default, no IPv6 global unicast
address is configured on an
interface.
Remarks
—
—
Required
By default, no IPv6 global unicast
address is configured on an
interface.
Remarks
—
—
Required
By default, no IPv6 global unicast
address is configured on an
interface.