No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE20E-S2 V800R010C10SPC500 Configuration Guide - IP Services 01

This is NE20E-S2 V800R010C10SPC500 Configuration Guide - IP Services
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring IPv6 Neighbor Discovery

Configuring IPv6 Neighbor Discovery

IPv6 neighbor discovery (ND) uses a group of messages and processes that identify relationships between neighboring nodes. IPv6 ND contains the same functions of ARP and ICMP router discovery, as well as the additional neighbor reachability detection function.

Pre-configuration Tasks

Before configuring IPv6 neighbor discovery, complete the following tasks:

  • Connect interfaces and configure physical parameters for the interfaces to ensure that the physical status of the interfaces is Up.

  • Configure link layer protocol parameters for the interfaces to ensure that the link layer protocol status of the interfaces is Up.

  • Enable IPv6 in the interface view.

  • Configure IPv6 addresses for interfaces.

Configuration Procedures

Configuring Static Neighbors

You can obtain the mappings between IPv6 addresses and MAC addresses of neighbors after configuring static neighbors. Neighbor entries represent the mappings between IPv6 addresses and MAC addresses of neighbors. If a device is not enabled to send ND protocol packets, it cannot obtain neighbor entries. In this case, you can configure static neighbors on the device to obtain neighbor entries.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run interface interface-type interface-number

    The interface view is displayed.

  3. Run any of the following commands:

    • To configure a static neighbor on a common Layer 3 interface, run the ipv6 neighbor ipv6-address mac-address command.

    • To configure a static neighbor on a VLANIF interface, run the ipv6 neighbor ipv6-address mac-address vid vlan-id interface-type interface-number command.

    • To configure a static neighbor on a sub-interface for QinQ VLAN tag termination or dot1q VLAN tag termination, run the ipv6 neighbor ipv6-address mac-address vid vid[ cevid cevid ] command.

      NOTE:
      After the function of sending ND protocol packets is enabled on a device, a common interface like a GE interface either automatically sends multicast NS packets to learn ND entries actively or respond to NS packets to learn ND entries passively. However, a sub-interface for QinQ VLAN tag termination or dot1q VLAN tag termination cannot send multicast NS packets but discards the multicast NS packets instead. Therefore, to enable a sub-interface for QinQ VLAN tag termination or dot1q VLAN tag termination to send multicast NS packets, run the ipv6 nd ns multicast-enable command on the sub-interface for QinQ VLAN tag termination or dot1q VLAN tag termination. This configuration enables the sub-interface for QinQ VLAN tag termination or dot1q VLAN tag termination to learn ND entries.

  4. Run commit

    The configuration is committed.

(Optional) Setting the Aging Time for Neighbor Entries in the Stale State

You can set a shorter aging time for neighbor entries in the Stale state to speed up the aging of neighbor entries.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run ipv6 nd stale-timeout seconds

    The aging time is set for the neighbor entries in the Stale state.

  3. Run interface interface-type interface-number

    The interface view is displayed.

  4. Run ipv6 nd stale-timeout seconds

    The aging time is set for neighbor entries in the Stale state on the interface.

  5. Run commit

    The configuration is committed.

(Optional) Setting the Neighbor Reachability Detection Interval

A device can send NS messages to detect whether its neighbors are reachable. Therefore, you can set the NS message transmission interval to control the neighbor reachability detection frequency. Frequent NS message transmissions help rapidly determine whether neighbors are reachable, but also affect system performance. Therefore, it is recommended that the interval not be set too short.

Procedure

  1. Run system-view

    The system view is displayed.

  2. (Optional) Run ipv6 nd pre-detect

    The neighbor reachability detection interval is set.

  3. (Optional) Run ipv6 nd auto-detect enable

    The neighbor reachability detection interval is set.

  4. Run interface interface-type interface-number

    The interface view is displayed.

  5. Run ipv6 nd ns retrans-timer interval

    The neighbor reachability detection interval is set.

  6. Run commit

    The configuration is committed.

(Optional) Configuring the Maximum Number of Dynamic Neighbor Entries

Configuring the maximum number of dynamic neighbor entries defends against RA flooding attacks.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run interface interface-type interface-number

    The interface view is displayed.

  3. Run ipv6 nd neighbor-limit max-number

    The maximum number of dynamic neighbor entries allowed by an interface is configured.

  4. Run commit

    The configuration is committed.

Verifying the Configuration of IPv6 Neighbor Discovery

After configuring IPv6 neighbor discovery, verify the configuration.

Prerequisites

IPv6 neighbor discovery has been configured.

Procedure

  1. Run the display ipv6 neighbors [ interface-type interface-number | ipv6-address | vid vlan-id interface-type interface-number | vpn-instance vpn-instance-name ] command to check IPv6 neighbor entries.
  2. Run the display ipv6 interface [ interface-type interface-number | brief ] command to check IPv6 configurations on an interface.

Example

Run the display ipv6 neighbors command. The command output shows IPv6 addresses and interfaces of neighbors.

<HUAWEI> display ipv6 neighbors Vlanif 1
-----------------------------------------------------------------------------
IPv6 Address : 2001:db8::1                                                      
Link-layer   : 00fe-00e0-0089                     State     : INCMP               
Interface    : GE0/1/1                            Age       : -                   
VLAN         : 1                                  CEVLAN    : -                   
VPN name     : -                                  Is Router : TRUE               
Secure FLAG  : SECURE-----------------------------------------------------------------------------
Total: 1        Dynamic: 0      Static: 1
<HUAWEI> display ipv6 neighbors gigabitethernet 0/1/0
-----------------------------------------------------------------------------
IPv6 Address : FE80::2E0:FCFF:FE89:FE6E                                         
Link-layer   : 00e0-fc89-fe6e                     State     : INCMP               
Interface    : GE0/1/0                            Age       : -                   
VLAN         : -                                  CEVLAN    : -                   
VPN name     : vpn1                               Is Router : TRUE               
Secure FLAG  : SECURE-----------------------------------------------------------------------------
Total: 1        Dynamic: 0      Static: 1

Run the display ipv6 interface command. The command output shows the IPv6 addresses configured on an interface.

<HUAWEI> display ipv6 interface gigabitethernet 0/1/0
GigabitEthernet0/1/0 current state : UP 
IPv6 protocol current state : UP
link-local address is FE80::200:1FF:FE04:5D00
  Global unicast address(es):
2001::1, subnet is 2001::/64
  Joined group address(es):
    FF02::1:FF00:1
    FF02::1:FF04:5D00
    FF02::2
    FF02::1
  MTU is 1500 bytes
  ND DAD is enabled, number of DAD attempts: 1
  ND reachable time is 1200000 milliseconds
  ND retransmit interval is 1000 milliseconds
  Hosts use stateless autoconfig for addresses

Run the display ipv6 interface brief command. The command output shows the IPv6 addresses configured on interfaces and the interface status.

<HUAWEI> display ipv6 interface brief
*down: administratively down
!down: FIB overload down
(l): loopback
(s): spoofing
Interface                    Physical              Protocol VPN
GigabitEthernet0/2/2         up                    up      --
[IPv6 Address] 2001:db8::101:101
Translation
Download
Updated: 2019-01-02

Document ID: EDOC1100055376

Views: 17921

Downloads: 35

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next