HPE 3100 Configuration Manual page 130

EUI-64 IPv6 addressing
To configure an interface to generate an EUI-64 IPv6 address:
Step
1. Enter system view.
2. Enter interface view.
3. Configure the interface to
generate an EUI-64 IPv6
address.
Manual configuration
To specify an IPv6 address manually for an interface:
Step
1. Enter system view.
2. Enter interface view.
3. Configure an IPv6 address
manually.
Stateless address autoconfiguration
To configure an interface to generate an IPv6 address by using stateless address autoconfiguration:
Step
1. Enter system view.
2. Enter interface view.
3. Configure an IPv6 address to be
generated through stateless
address autoconfiguration.
NOTE:
Using the undo ipv6 address auto command on an interface removes all IPv6 global unicast
addresses automatically generated on the interface.
With stateless address autoconfiguration enabled on an interface, the device automatically
generates an IPv6 global unicast address by using the address prefix information in the received RA
message and the interface ID. On an IEEE 802 interface (such as a VLAN interface), the interface ID
is generated based on the MAC address of the interface, and is globally unique. As a result, the
interface ID portion of the IPv6 global address remains unchanged and exposes the sender. An
attacker can further exploit communication details such as the communication peer and time.
To fix the vulnerability, configure the temporary address function that enables the system to generate
and use temporary IPv6 addresses with different interface ID portions on an interface. With this
function configured on an IEEE 802 interface, the system can generate two addresses, public IPv6
address and temporary IPv6 address.
•
Public IPv6 address—Comprises an address prefix provided by the RA message, and a fixed
interface ID generated based on the MAC address of the interface.
Command
system-view
interface interface-type
interface-number
ipv6 address
ipv6-address/prefix-length
eui-64
Command
system-view
interface interface-type
interface-number
ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
Command
system-view
interface interface-type
interface-number
ipv6 address auto
120
Remarks
N/A
N/A
By default, no IPv6 global unicast
address is configured on an
interface.
Remarks
N/A
N/A
By default, no IPv6 global unicast
address is configured on an
interface.
Remarks
N/A
N/A
By default, no IPv6 global unicast
address is configured on an
interface.