Configuration Procedure - HP FlexNetwork 10500 Series Security Configuration Manual

Figure 152 Network diagram

Configuration procedure

# Create an RA guard policy named policy1.
<Switch> system-view
[Switch] ipv6 nd raguard policy policy1
# Set the maximum router preference to high for the RA guard policy.
[Switch-raguard-policy-policy1] if-match router-preference maximum high
# Specify on as the M flag match criterion for the RA guard policy.
[Switch-raguard-policy-policy1] if-match autoconfig managed-address-flag on
# Specify on as the O flag match criterion for the RA guard policy.
[Switch-raguard-policy-policy1] if-match autoconfig other-flag on
# Set the maximum advertised hop limit to 120 for the RA guard policy.
[Switch-raguard-policy-policy1] if-match hop-limit maximum 120
# Set the minimum advertised hop limit to 100 for the RA guard policy.
[Switch-raguard-policy-policy1] if-match hop-limit minimum 100
[Switch-raguard-policy-policy1] quit
# Assign GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 to VLAN 10.
[Switch] interface gigabitethernet 1/0/1
[Switch-GigabitEthernet1/0/1] port link-type access
[Switch-GigabitEthernet1/0/1] port access vlan 10
[Switch-GigabitEthernet1/0/1] quit
[Switch] interface gigabitethernet 1/0/2
[Switch-GigabitEthernet1/0/2] port link-type access
[Switch-GigabitEthernet1/0/2] port access vlan 10
[Switch-GigabitEthernet1/0/2] quit
# Configure GigabitEthernet 1/0/3 to trunk VLAN 10.
[Switch] interface gigabitethernet 1/0/3
[Switch-GigabitEthernet1/0/3] port link-type trunk
[Switch-GigabitEthernet1/0/3] port trunk permit vlan 10
[Switch-GigabitEthernet1/0/3] quit
# Apply the RA guard policy policy1 to VLAN 10.
[Switch] vlan 10
[Switch-vlan10] ipv6 nd raguard apply policy policy1
519