Manual Configuration - HP 10500 Series Configuration Manual

Step
2. Enter interface view.
3. Configure the interface to
generate an EUI-64 IPv6
address.

Manual configuration

To specify an IPv6 address manually for an interface:
Step
1. Enter system view.
2. Enter interface view.
3. Configure an IPv6 address
manually.
Stateless address autoconfiguration
To configure an interface to generate an IPv6 address by using stateless address autoconfiguration:
Step
1. Enter system view.
2. Enter interface view.
3. Configure an IPv6 address to
be generated through
stateless address
autoconfiguration.
Using the undo ipv6 address auto command on an interface removes all IPv6 global unicast addresses
automatically generated on the interface.
With stateless address autoconfiguration enabled on an interface, the device automatically generates an
IPv6 global unicast address by using the address prefix information in the received RA message and the
interface ID. On an IEEE 802 interface (such as a VLAN interface), the interface ID is generated based
on the MAC address of the interface, and is globally unique. As a result, the interface ID portion of the
IPv6 global address remains unchanged and exposes the sender. An attacker can further exploit
communication details such as the communication peer and time.
To fix the vulnerability, configure the temporary address function that enables the system to generate and
use temporary IPv6 addresses with different interface ID portions on an interface. With this function
configured on an IEEE 802 interface, the system can generate two addresses, public IPv6 address and
temporary IPv6 address.
Public IPv6 address—Comprises an address prefix provided by the RA message, and a fixed
•
interface ID generated based on the MAC address of the interface.
Temporary IPv6 address—Comprises an address prefix provided by the RA message, and a
•
random interface ID generated through MD5.
Command
interface interface-type
interface-number
ipv6 address
ipv6-address|prefix-length eui-64
Command
system-view
interface interface-type
interface-number
ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
Command
system-view
interface interface-type
interface-number
ipv6 address auto
115
Remarks
N/A
By default, no IPv6 global unicast
address is configured on an interface.
Remarks
N/A
N/A
By default, no IPv6 global unicast
address is configured on an interface.
Remarks
N/A
N/A
By default, no IPv6 global unicast
address is configured on an interface.