Enabling Nd Snooping - Huawei Quidway S2700 Series Configuration Manual

Quidway S2700 Series Ethernet Switches
Configuration Guide - Security
NS messages. The ND dynamic binding table saves information about IPv6 addresses, MAC
addresses, and VLAN IDs of clients. The S2700 delivers the ND dynamic binding entries to the
ACL that is automatically generated. Packets matching the entries in the ACL are permitted by
default.
Pre-configuration Tasks
Before configuring ND snooping, complete the following task:
l
Data Preparation
To configure ND snooping, you need the following data.
No.
1
2
3

10.3.2 Enabling ND Snooping

After ND snooping is enabled globally, you must enable ND snooping on interface or in a VLAN.
Otherwise, ND snooping does not take effect.
Context
Before enabling ND snooping on interface or in a VLAN, you must enable ND snooping
globally. By default, ND snooping is disabled globally, on interface or in a VLAN.
Procedure
l
Issue 01 (2011-07-15)
Configuring the ND server
Data
Type and number of interface that needs to be configured as the trusted interface
(Optional) Number of detection times for aging ND dynamic binding entries
(Optional) Detection interval for aging ND dynamic binding entries
Configuring ND snooping on an interface
1. Run:
system-view
The system view is displayed.
2. Run:
dhcp enable
DHCP is enabled globally.
3. Run:
nd snooping enable
ND snooping is enabled globally.
4. Run:
interface interface-type interface-number
The interface view is displayed.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
10 ND Snooping Configuration
183