Configuring ND Inspection

Step 1 Enable DHCPv6 snooping.

set protocols dhcp snooping vlan <vlan-id> disable <true | false>

NOTE:

ND inspection does not generate table entries by itself and needs to rely on the table entries formed by DHCPv6 snooping, thus, user needs to enable DHCPv6 snooping first.

Step 2 Enable ND inspection for a VLAN.

set protocols neighbour inspection vlan <vlan-id> disable <true | false>

NOTE:

DAD message does not carry a source MAC address; therefore, this type of message will be skipped in ND inspection.

Step 3 (Optional) Configure the device to check source MAC address against the link-layer source address.

set protocols neighbour inspection validate source-mac

Step 4 (Optional) Configure the trust-port for a device.

set protocols neighbour inspection trust-port <port>

Step 5 Commit the configurations.

commit

Step 6 View DHCPv6 snooping dynamic binding table entries used by ND inspection.

run show nd inspection dhcp6-snooping binding