This section describes how to configure the IPv6 packet check function, a static binding table, and a policy for detecting IPv6 packets to prevent IPv6/MAC spoofing attacks against a DHCPv6 server.
The system periodically performs ND probe on users' IPv6 addresses. If a user cannot be detected for the specified number of probes, the system will delete the DHCPv6 binding entry corresponding to the user and construct a DHCPv6 Release message to notify the DHCPv6 server of releasing the user's IPv6 address.