Example for ND Inspection
- Tracy Yang
Analytics
Networking Requirements
Building the corresponding network according to the topology diagram, and do the basic network connectivity configuration, configure the ND snooping inspection feature on Switch A, and after the correct configuration is completed, check the effective configuration on Switch A.
Host A accesses the DHCPv6 Server through Switch A and Switch A forwards the IPv6 address assigned by the DHCPv6 Server to Host A.
Figure 1. ND Inspection Configuration Example
Procedure
Switch A
Step 1 Add VLAN members to trunk ports.
admin@SwitchA# set interface gigabit-ethernet ge-1/1/1 family ethernet-switching native-vlan-id 20
admin@SwitchA# set interface gigabit-ethernet ge-1/1/1 family ethernet-switching port-mode trunk
admin@SwitchA# set interface gigabit-ethernet ge-1/1/2 family ethernet-switching port-mode trunk
admin@SwitchA# set interface gigabit-ethernet ge-1/1/2 family ethernet-switching vlan members 20Step 2 Enable DHCPv6 snooping.
admin@SwitchA# set protocols dhcp6 snooping trust-port ge-1/1/2
admin@SwitchA# set protocols dhcp6 snooping vlan 20 disable false
admin@SwitchA# set protocols dhcp6 traceoptions flag all disable falseStep 3 Enable ND inspection and verify source MAC address.
admin@SwitchA# set protocols neighbour inspection vlan 20 disable false
admin@SwitchA# set protocols neighbour inspection trust-port ge-1/1/2
admin@SwitchA# set protocols neighbour inspection validate source-macStep 4 Commit the configurations.
Verifying the Configuration
The show command can be used to show table entry about configuration on Switch A.
The run show dhcp6 snooping binding command is used to view DHCPv6 snooping binding table.
The run show nd inspection dhcp6-snooping binding command is used to view DHCPv6 snooping dynamic binding table entries used by ND inspection..
View DHCPv6 snooping binding table.
View DHCPv6 snooping dynamic binding table entries used by ND inspection.
Related content
Copyright © 2025 Pica8 Inc. All Rights Reserved.