(Optional) Configuring MAC Address Check for ND

Context

To enable the system to proactively detect source MAC address consistency to improve network reliability, run the ipv6 nd mac-check enable command to enable MAC address check for ND so that MAC address consistency is performed on four different types of ICMPv6 packets.

• NS: The system checks whether the source MAC address is the same as the MAC address in the SLLA. If not, the NS message is discarded.

• NA: The system checks whether the source MAC address is the same as the MAC address in the TLLA. If not, the NA message is discarded.

• RS: The system checks whether the source MAC address is the same as the MAC address in the SLLA. If not, the RS message is discarded.

• RA: The system checks whether the source MAC address is the same as the MAC address in the SLLA. If not, the RA message is discarded.

Procedure

1. Run system-view

   The system view is displayed.

2. Run ipv6 nd mac-check enable

   MAC address check for ND is enabled.

3. Run commit

   The configuration is committed.