Enabling Nd Proxy - HP 3600 v2 Series Configuration Manual

Step
6. Enter Layer 2 Ethernet port
view/Layer 2 aggregate
interface view.
7. Configure the maximum
number of ND snooping
entries the interface can
learn.
8. Configure the interface as
an uplink interface and
disable it from learning
ND snooping entries.

Enabling ND proxy

ND proxy supports the NS and NA messages only.
Introduction
If a host sends an NS message requesting the hardware address of another host that is isolated from the
sending host at Layer 2, the device between the hosts must be able to forward the NS message to allow
Layer 3 communication between the two hosts. This process is achieved by ND proxy.
Depending on application scenarios, ND proxy falls into common ND proxy and local ND proxy.
• Common ND proxy
As shown in
with IPv6 address 4:2::99/64 belong to different subnets. Host A and Host B reside on the same
network but in different broadcast domains.
Figure 56 Application environment of common ND proxy
Because Host A's IPv6 address is on the same subnet as Host B's, Host A directly sends an NS
message to obtain Host B's MAC address. However, Host B cannot receive the NS message
because they belong to different broadcast domains.
To solve this problem, enable common ND proxy on VLAN-interface 1 and VLAN-interface 2 of the
switch. The switch finds the matching forwarding entry according to the destination IPv6 address
of the NS message and sends the message through the output interface of that entry. Upon
receiving the NS message, Host B sends an NA message to the switch, which forwards it to Host
A.
Local ND proxy
•
As shown in
1/0/3 and Ethernet 1/0/1 respectively, which are isolated at Layer 2.
Command
interface interface-type interface-number
ipv6 nd snooping max-learning-num number
ipv6 nd snooping uplink
Figure 56, VLAN-interface 1 with IPv6 address 4:1::99/64 and VLAN-interface 2
Figure 57, both Host A and Host B belong to VLAN 2, but they connect to Ethernet
133
Remarks
N/A
Optional.
By default, the number of
ND snooping entries an
interface can learn is
unlimited.
Optional.
By default, when ND
snooping is enabled on the
device, an interface is
allowed to learn ND
snooping entries.