The display ipv6 nd security nonce command displays the Nonce value of the current secure ND transaction.
Parameter | Description | Value |
---|---|---|
interface-name |
Specifies the name of an interface. That is, the Nonce value in the SEND message on the specified interface is displayed. |
- |
interface-type interface-num |
Specifies the type and number of an interface. That is, the Nonce value in the SEND message on the specified interface is displayed. |
- |
Usage Scenario
Nonce option contains a random number selected by the sender of a solicitation message. This option prevents replay attacks during packet exchange. For example, a sender sends an NS message carrying the Nonce option and receives an NA message as a response that also carries the Nonce option; the sender verifies the NA message based on the Nonce option.
You can run the display ipv6 nd security nonce command to view the Nonce value in an SEND message and the IPv6 address of the peer interface.The actual command output varies according to the device. The command output here is only an example.
<HUAWEI> display ipv6 nd security nonce gigabitethernet 0/1/1 Total Number of Nonce Entries : 1 -------------------------------------------------------------- Peer Address Nonce Value -------------------------------------------------------------- FE80::1CA1:5572:34D5:632F 0x57 22 da 69 01 b3
Item | Description |
---|---|
Total Number of Nonce Entries | Total number of Nonce entries. |
Nonce Value | Nonce value in an SEND message. |
Peer Address | IPv6 address of the peer interface. |