Enabling SAVI
Context
To defend against attacks from invalid ND packets, DHCPv6 packets, and IPv6 data packets, configure the SAVI function. The device uses ND snooping and DHCPv6 snooping to create a table recording bindings between IP addresses and ports to check the validity of ND packets, DHCPv6 packets, and IPv6 data packets and filter out invalid packets.
Before configuring the SAVI function, enable the SAVI function.
After SAVI is enabled, only binding entries corresponding to IPv6 addresses with the FE80::/10 address prefix can be automatically generated, and no prefix entry is generated.