< Home

ipv6 nd learning strict

Function

The ipv6 nd learning strict command enables IPv6 neighbor discovery (ND) strict learning.

The undo ipv6 nd learning strict command disables IPv6 ND strict learning.

By default, IPv6 ND strict learning is disabled.

Format

ipv6 nd learning strict { force-disable | force-enable | trust }

undo ipv6 nd learning strict

Parameters

Parameter Description Value
force-disable Disables IPv6 ND strict learning forcibly. -
force-enable Enables IPv6 ND strict learning forcibly. -
trust Inherits the global setting of IPv6 ND strict learning. -

Views

Ethernet interface view, Eth-Trunk interface view, Tunnel interface view, VLANIF interface view, system view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

A device uses neighbor advertisement (NA) packets to establish neighbor entries, which does not comply with RFC 4861. To comply with RFC 4861, run the ipv6 nd learning strict command to enable IPv6 ND strict learning. After you enable IPv6 ND strict learning on a device, the device uses NA packets only in response to neighbor solicitation (NS) packets to establish neighbor entries.

The ipv6 nd learning strict and undo ipv6 nd learning strict commands apply only to VLANIF interfaces, Eth-Trunk interfaces, and Eth-Trunk sub-interfaces.

Precautions

After you run the ipv6 nd learning strict command on a device, the device synchronizes fake entries. Synchronizing a large number of fake entries affects device performance. Therefore, you are advised to use the command only for protocol consistency tests.

Example

# Enable IPv6 ND strict learning globally.

<sysname> system-view
[sysname] ipv6 nd learning strict

# Enable IPv6 ND strict learning on VLANIF 2 forcibly.

<sysname> system-view
[sysname] interface vlanif 2
[sysname-Vlanif2] ipv6 nd learning strict force-enable
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >