HPE FlexNetwork 10500 Series Configuration Manual page 173

takes effect. However, it does not overwrite the automatically generated address. If you delete the
manually configured global unicast address, the device uses the automatically generated one.
EUI-64 IPv6 address
To configure an interface to generate an EUI-64 IPv6 address:
Step
1. Enter system view.
2. Enter interface view.
3. Configure the interface to
generate an EUI-64 IPv6
address.
Manual configuration
To configure an IPv6 global unicast address for an interface:
Step
1. Enter system view.
2. Enter interface view.
3. Configure an IPv6 global
unicast address for the
interface.
Stateless address autoconfiguration
To configure an interface to generate an IPv6 address through stateless address autoconfiguration:
Step
1. Enter system view.
2. Enter interface view.
3. Enable stateless address
autoconfiguration on an
interface, so that the
interface can automatically
generate a global unicast
address.
After this configuration is completed, the interface automatically generates an IPv6 global unicast
address by using the address prefix in the received RA message and the interface ID. On an IEEE
802 interface (such as an Ethernet interface or a VLAN interface), the interface ID is generated
based on the interface's MAC address and is globally unique. An attacker can exploit this rule to
identify the sending device easily.
To fix the vulnerability, you can configure the temporary address feature. With this feature, an IEEE
802 interface generates the following addresses:
Command
system-view
interface interface-type
interface-number
ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
eui-64
Command
system-view
interface interface-type
interface-number
ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
Command
system-view
interface interface-type
interface-number
ipv6 address auto
162
Remarks
N/A
N/A
By default, no EUI-64 IPv6 address
is configured on an interface.
Remarks
N/A
N/A
By default, no IPv6 global unicast
address is configured on an
interface.
Remarks
N/A
N/A
By default, the stateless address
autoconfiguration feature is disabled
on an interface.
Using the undo ipv6 address auto
command on an interface deletes all
IPv6 global unicast addresses and
link-local addresses that are
automatically generated on the
interface.