Table 203: Nd Snooping Commands - Edge-Core ECS3510-28T Management Manual

ND Snooping
Neighbor Discover (ND) Snooping maintains an IPv6 prefix table and user
address binding table. These tables can be used for stateless address auto-
configuration or for address filtering by IPv6 Source Guard.
ND snooping maintains a binding table in the process of neighbor
discovery. When it receives an Neighbor Solicitation (NS) packet from a
host, it creates a new binding. If it subsequently receives a Neighbor
Advertisement (NA) packet, this means that the address is already being
used by another host, and the binding is therefore deleted. If it does not
receive an NA packet after a timeout period, the binding will be bound to
the original host. ND snooping can also maintain a prefix table used for
stateless address auto-configuration by monitoring Router Advertisement
(RA) packets sent from neighboring routers.
ND snooping can also detect if an IPv6 address binding is no longer valid.
When a binding has been timed out, it checks to see if the host still exists
by sending an NS packet to the target host. If it receives an NA packet in
response, it knows that the target still exists and updates the lifetime of
the binding; otherwise, it deletes the binding.
This section describes commands used to configure ND Snooping.

Table 203: ND Snooping Commands

Command
ipv6 nd snooping
ipv6 nd snooping
auto-detect
ipv6 nd snooping auto-
detect retransmit count
ipv6 nd snooping auto-
detect retransmit interval
ipv6 nd snooping prefix
timeout
ipv6 nd snooping
max-binding
ipv6 nd snooping trust
clear ipv6 nd snooping
binding
clear ipv6 nd snooping
prefix
show ipv6 nd snooping
show ipv6 nd snooping
binding
show ipv6 nd snooping
prefix
– 1423 –
C
HAPTER
Function
Enables ND snooping globally or on a specified VLAN
or range of VLANs
Enables automatic validation of binding table entries
by periodically sending NS messages and awaiting
NA replies
Sets the number of times to send an NS message to
determine if a binding is still valid
Sets the interval between sending NS messages to
determine if a binding is still valid
Sets the time to wait for an RA message before
deleting an entry in the prefix table
Sets the maximum number of address entries which
can be bound to a port
Configures a port as a trusted interface from which
prefix information in RA messages can be added to
the prefix table, or NS messages can be forwarded
without validation
Clears all entries in the address binding table
Clears all entries in the prefix table
Shows configuration settings for ND snooping
Shows entries in the binding table
Show entries in the prefix table
| IP Interface Commands
44
ND Snooping
Mode
GC
GC
GC
GC
GC
IC
IC
PE
PE
PE
PE
PE