< Home

nd snooping alarm binding-table check enable

Function

The nd snooping alarm binding-table check enable command enables the alarm function for checking packets against the ND snooping binding table.

The undo nd snooping alarm binding-table check enable command disables the alarm function for checking packets against the ND snooping binding table.

By default, the alarm function for checking packets against the ND snooping binding table is disabled.

Format

nd snooping alarm binding-table check enable

undo nd snooping alarm binding-table check enable

Parameters

None

Views

Ethernet interface view, GE interface view, XGE interface view, 25GE interface view, MultiGE interface view, 40GE interface view, 100GE interface view, Eth-Trunk interface view, port group view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After ND protocol packet validity check is enabled using the nd snooping check enable command, the device checks the NA, NS, and RS packets received from untrusted interfaces against the ND snooping binding table and discards the packets that do not match the binding table. If the number of discarded packets exceeds the threshold, the corresponding alarm is generated. The minimum interval for sending alarm messages is 1 minute. You can run the nd snooping alarm binding-table check threshold command to set the alarm threshold.

Prerequisites

ND snooping has been enabled on the device using the nd snooping enable command.

Precautions

To ensure that alarms can be properly reported, you need to run the snmp-agent trap enable feature-name dhcp command to enable the DHCP module to report the corresponding alarm. You can check whether the DHCP module is enabled to report the corresponding alarm using the display snmp-agent trap feature-name dhcp all command.

Example

# Enable the alarm function for checking packets against the ND snooping binding table on GE0/0/1.

<HUAWEI> system-view
[HUAWEI] nd snooping enable
[HUAWEI] interface gigabitethernet 0/0/1
[HUAWEI-GigabitEthernet0/0/1] nd snooping alarm binding-table check enable
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >