D-Link DXS-3400 User Manual - Page 351

DXS-3400 Series Lite Layer 3 Stackable 10GbE Managed Switch Web UI Reference Guide Parameter Policy Name Limit Address Count Protocol VID List Description Enter the IPv6 snooping policy name used here. This name can be up to 32 characters long. Enter the address count limit value used here. This value must be between 0 and 511. Tick the No Limit option to disable this option. Select the protocol state here. Options to choose from are Enabled and Disabled. Select DHCP to associate the DHCP protocol with this policy. Select NDP to associate the NDP protocol with this policy. DHCPv6 Snooping sniffs the DHCPv6 packets sent between the DHCPv6 client and server in the address assigning procedure. When a DHCPv6 client successfully got a valid IPv6 address, DHCPv6 snooping creates its binding database. ND Snooping is designed for a stateless auto-configuration assigned IPv6 address and manually configured IPv6 address. Before assigning an IPv6 address, the host must perform Duplicate Address Detection first. ND snooping detects DAD messages (DAD Neighbor Solicitation (NS) and DAD Neighbor Advertisement (NA)) to build its binding database. The NDP packet (NS and NA) is also used to detect whether a host is still reachable and determine whether to delete a binding or not. Enter the VLAN ID list used here. Click the Apply button to accept the changes made. Click the Edit button to re-configure the specific entry. Click the Delete button to remove the specified entry. IPv6 ND Inspection This window is used to display and configure the IPv6 ND inspection settings. To view the following window, click Security > IMPB > IPv6 >IPv6 ND Inspection, as shown below: Figure 9-57IPv6 ND Inspection Window The fields that can be configured are described below: Parameter Policy Name Device Role Validate Source-MAC Description Enter the policy name used here. This name can be up to 32 characters long. Select the device role here. Options to choose from are Host and Router. By default, the device's role is set as host and inspection for NS and NA messages are performed. If the device role is set as router, the NS and NA inspection is not performed. When performing NS/NA inspection, the message will be verified against the dynamic binding table learned from the ND protocol or from the DHCP. Select to enable or disable the validation of the source MAC address option here. When the Switch receives an ND message that contains a link-layer address, the source MAC address is checked against the link-layer address. The packet will be dropped if the link-layer address and the MAC addresses are different from each 341