5 savi check binding, 5 savi check binding -3 – PLANET XGS3-24042 User Manual

Page 1050

Advertising
background image

58-3

Configure the port as slaac trust and RA trust port, this port will not establish dynamic slaac binding

any more and forwards RA packets. The no command deletes the port trust function.

Command Mode:

Port Mode.

Default:

Disable port trust function.

Usage Guide:

If the port disables ipv6 nd snooping trust function, it is considered to untrust RA packets port and

discards all RA packets. Setting the port as trust attribute, enable the uplink port of the switch with

SAVI or the conjoint port between switches with SAVI generally.

Example:

Set the port ethernet1/0/1 to be nd trust port.

Switch(config)#interface ethernet1/0/1

Switch(config-if-ethernet1/0/1)#ipv6 nd snooping trust

58.1.5 savi check binding

Command:

savi check binding <simple | probe> mode

no savi check binding mode

Function:

Configure the check mode for conflict binding, the no command deletes the check mode.

Parameter:

simple mode: only check the port state for conflict binding, if the state is up, keep the conflict

binding and do not set new binding. If the state is down, delete the conflict binding to set a new one

probe mode: besides checking the port state for conflict binding, it will send NS packets to probe

the usability of the corresponding user when the port state is up. If receiving the responded NA

packets from users, it will keep the current conflict binding and does not set new binding, otherwise

delete the conflict binding to set new one.

Command Mode:

Global Mode.

Default:

Disable the conflict binding check mode by default. It will adopt the mode that delete the conflict

binding directly to set new one.

Usage Guide:

It is recommended to configure probe mode to prevent the attack that the spurious address conflict

binding deletes the legal user binding.

Advertising
This manual is related to the following products: