Nd Detection Configuration Example; Network Diagram - HP 3600 v2 Series Security Configuration Manual

ND detection configuration example

Network requirements
As shown in
has the IPv6 address 10::5 and MAC address 0001-0203-0405. Host B has the IPv6 address 10::6 and
MAC address 0001-0203-0607.
Enable ND detection on Switch B to filter out forged ND packets.

Network diagram

Figure 134 Network diagram
Switch A
ND snooping
Switch B
Host A
10::5
0001-0203-0405
Configuration procedure
Configuring Switch A
1.
# Enable IPv6 forwarding.
<SwitchA> system-view
[SwitchA] ipv6
# Create VLAN 10.
[SwitchA] vlan 10
[SwitchA-vlan10] quit
# Assign port Ethernet 1/0/3 to VLAN 10.
[SwitchA] interface ethernet 1/0/3
[SwitchA- Ethernet1/0/3] port link-type trunk
[SwitchA- Ethernet1/0/3] port trunk permit vlan 10
[SwitchA- Ethernet1/0/3] quit
# Assign an IPv6 address to VLAN-interface 10.
[SwitchA] interface vlan-interface 10
Figure 134, Host A and Host B connect to Switch A, the gateway, through Switch B. Host A
Internet
Gateway
Eth1/0/3
Vlan-int10
10::1
VLAN 10
Eth1/0/3
Eth1/0/1 Eth1/0/2
0001-0203-0607
Host B
10::6
353