Nd Attack Defense Configuration Commands; Source Mac Consistency Check Commands; Ipv6 Nd Mac-Check Enable; Nd Detection Configuration Commands - HP 5120 SI series Command Reference Manual

ND attack defense configuration commands

Source MAC consistency check commands

ipv6 nd mac-check enable

Syntax
ipv6 nd mac-check enable
undo ipv6 nd mac-check enable
View
System view
Default level
2: System level
Parameters
None
Description
Use the ipv6 nd mac-check enable command to enable source MAC consistency check for ND packets.
Use the undo ipv6 nd mac-check enable command to disable source MAC consistency check for ND
packets.
By default, source MAC consistency check is disabled for ND packets.
In a typical forged ND packet, the Ethernet frame header conveys a source MAC address different than
the source link layer address option. To filter out these invalid ND packets, use the source MAC
consistency check function to check ND packets for MAC address inconsistency.
Examples
# Enable source MAC consistency check for ND packets.
<Sysname> system-view
[Sysname] ipv6 nd mac-check enable

ND detection configuration commands

display ipv6 nd detection

Syntax
display ipv6 nd detection [ | { begin | exclude | include } regular-expression ]
View
Any view
305