Configuring the maximum number of dynamic ND entries protects against RA flood attacks.
Procedure
- Configure the maximum number of dynamic ND entries on a Layer 3 interface.
- Run system-view
The system view is displayed.
- Run interface interface-type interface-number
The interface view is displayed.
- Run ipv6 enable
IPv6 is enabled for the interface.
By default, IPv6 is disabled on an interface.
- Run ipv6 nd neighbor-limit max-number
The maximum number of dynamic ND entries is configured on the interface.
- Run commit
The configuration is committed.
- Configure the maximum number of dynamic ND entries on a Layer 2 interface.
- Run system-view
The system view is displayed.
- Run interface interface-type interface-number
The interface view is displayed.
- Run portswitch
The interface working mode is switched to Layer 2.
- Run ipv6 nd neighbor-limit vlan vlanBegValue [ to vlanEndValue ] maximum limit-number
The maximum number of dynamic ND entries is configured on the interface.
- Run commit
The configuration is committed.