/
Example for ND Inspection

Example for ND Inspection

Owned by Tracy Yang
Nov 18, 2024
2 min read

Networking Requirements

Building the corresponding network according to the topology diagram, and do the basic network connectivity configuration, configure the ND snooping inspection feature on Switch A, and after the correct configuration is completed, check the effective configuration on Switch A.

Host A accesses the DHCPv6 Server through Switch A and Switch A forwards the IPv6 address assigned by the DHCPv6 Server to Host A.

Figure 1.    ND Inspection Configuration Example

image-20241010-032321.png

Procedure

Switch A

Step 1       Add VLAN members to trunk ports.

admin@SwitchA# set interface gigabit-ethernet ge-1/1/1 family ethernet-switching native-vlan-id 20 admin@SwitchA# set interface gigabit-ethernet ge-1/1/1 family ethernet-switching port-mode trunk admin@SwitchA# set interface gigabit-ethernet ge-1/1/2 family ethernet-switching port-mode trunk admin@SwitchA# set interface gigabit-ethernet ge-1/1/2 family ethernet-switching vlan members 20

Step 2       Enable DHCPv6 snooping.

admin@SwitchA# set protocols dhcp6 snooping trust-port ge-1/1/2 admin@SwitchA# set protocols dhcp6 snooping vlan 20 disable false admin@SwitchA# set protocols dhcp6 traceoptions flag all disable false

Step 3       Enable ND inspection and verify source MAC address.

admin@SwitchA# set protocols neighbour inspection vlan 20 disable false admin@SwitchA# set protocols neighbour inspection trust-port ge-1/1/2 admin@SwitchA# set protocols neighbour inspection validate source-mac

Step 4       Commit the configurations.

Verifying the Configuration

The show command can be used to show table entry about configuration on Switch A.

The run show dhcp6 snooping binding command is used to view DHCPv6 snooping binding table.

The run show nd inspection dhcp6-snooping binding command is used to view DHCPv6 snooping dynamic binding table entries used by ND inspection..

  • View DHCPv6 snooping binding table.

  • View DHCPv6 snooping dynamic binding table entries used by ND inspection.

 

Copyright © 2025 Pica8 Inc. All Rights Reserved.