Configuring Intra-VLAN Proxy ND

Intra-VLAN proxy ND can be deployed if two hosts are on the same VLAN but the VLAN is configured with Layer 2 port isolation.

Context

If hosts belong to the same VLAN but the VLAN is configured with Layer 2 port isolation, intra-VLAN proxy ND needs to be enabled on the associated VLAN interfaces to enable host interworking.

As shown in Figure 1, Host A and Host B are connected to Device, and the interfaces connecting Device to Host A and Host B belong to the same VLAN. Because intra-VLAN Layer 2 port isolation is configured on Device, Host A and Host B cannot communicate with each other at Layer 2.

Figure 1 Typically networking of intra-VLAN proxy ND

To address this problem, enable intra-VLAN proxy ND on Device's interface 1.

Procedure

Run system-view
The system view is displayed.
Run interface vlanif vlan-id or interface interface-type interface-number.sub-number
The VLANIF interface view or Layer 3 sub-interface view is displayed.
Run ipv6 enable
IPv6 is enabled on the interface.
Run ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length }
A global unicast address is configured for the interface.
Run ipv6 nd proxy inner-access-vlan enable
Intra-VLAN proxy ND is enabled.
- The IPv6 address of the interface enabled with proxy ND must be on the same network segment as the IPv6 address of the host connected to the interface.
- Proxy ND cannot be enabled on an interface configured with a CGA address. Otherwise, the replied NA packets that carry the CGA/RSA option may be discarded.
- Multiple types of proxy ND can be configured in the interface view. The priorities of these proxy ND types are as follows in descending order: any proxy ND > intra-VLAN proxy ND/inter-VLAN proxy ND/local proxy ND> routed proxy ND.
- Proxy ND is not supported for the following types of packets:
  NS packets with a link-local address as the target address
  DAD NS packets with the source address of all 0s
  NS packets with the target address and interface address on different network segments
  NS packets with the IP address of the local host as the target address.
Run commit
The configuration is committed.