Nd Detection Configuration Example - H3C S3100 Series Operation Manual

Configuration procedure
# Enable DHCPv6 snooping.
<SwitchA> system-view
[SwitchA] dhcp-snooping ipv6 enable
# Specify Ethernet 1/1 as trusted.
[SwitchA] interface Ethernet 1/0/1
[SwitchA-Ethernet1/0/1] dhcp-snooping ipv6 trust

ND Detection Configuration Example

Networking requirement
Users Host A and Host B connect to Switch A, the gateway, through Switch B. Host A has the IPv6
address 10::5 and MAC address 0001-0203-0405. Host B has the IPv6 address 10::6 and MAC
address 0001-0203-0607.
Requirements: Enable the ND detection on Switch B to check user legality and to ensure the packets of
legal users can be forwarded normally while those of illegal users are discarded.
Networking diagram
Figure 1-10 Networking diagram for ND detection configuration
Switch A
ND snooping
Switch B
Eth1/0/1
Host A
10::5
0001-0203-0405
Configuration procedure
1) Configure all the ports marked in the networking diagram for VLAN 10 and the IPv6 address for
Switch A corresponding to the VLAN interface (omitted)
2) Configure Switch B
# Enable ND snooping.
<SwitchB> system-view
[SwitchB] vlan 10
[SwitchB-vlan10] ipv6 nd snooping enable
# Enable ND detection.
[SwitchB-vlan10] ipv6 nd detection enable
[SwitchB-vlan10] quit
Internet
Gateway
Eth1/0/3
Vlan-int10
10::1
VLAN 10
Eth1/0/3
Eth1/0/2
Host B
10::6
0001-0203-0607
1-27