nd optimized-passby enable

Function

The nd optimized-passby enable command configures the device not to send NS packets destined for other devices to the CPU.

The undo nd optimized-passby enable command configures the device to send NS packets destined for other devices to the CPU.

By default, a device does not send NS packets destined for other devices to the CPU.

Format

nd optimized-passby enable

undo nd optimized-passby enable

Only the S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-HI, S6730-H, S6730S-H, S6730-S, and S6730S-S support this command.

Parameters

None

Views

VLANIF interface view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If an interface receives a large number of NS packets whose destination IPv6 addresses are different from the IPv6 address of this interface and sends these NS packets to the CPU for processing, the CPU usage is high and the CPU cannot process services properly.

To prevent this issue, you can configure the device to directly forward NS packets destined for other devices without sending them to the CPU. This improves the device's capability of defending against packet attacks.

Precautions

If the nd snooping enable is executed in system view, or if IPv6 protocol is Down on the VLANIF interface, the configuration of disabling the device from sending NS packets destined for other devices to the CPU does not take effect on the VLANIF interface.

Example

# Configure the device to send NS packets destined for other devices to the CPU.

<HUAWEI> system-view
[HUAWEI] interface vlanif 100
[HUAWEI-Vlanif100] undo nd optimized-passby enable