D-Link DGS-3630 User Manual 1 - Page 539

DGS-3630 Series Layer 3 Stackable Managed Switch Web UI Reference Guide To view the following window, click Security > IMPB > IPv6 > IPv6 ND Inspection, as shown below: Figure 9-61 IPv6 ND Inspection Window The fields that can be configured are described below: Parameter Policy Name Device Role Mode Description Enter the policy name used here. This name can be up to 32 characters long. Select the device role here. Options to choose from are Host and Router. By default, the device's role is set as host and inspection for NS and NA messages are performed. If the device role is set as router, the NS and NA inspection is not performed. When performing NS/NA inspection, the message will be verified against the dynamic binding table learned from the ND protocol or from the DHCP. Select the mode of ND inspection here. Options to choose from are: • Precise - Specifies to use the precise mode. ND inspection checks if the target address is the same as the source address in DANA/NA packets. • Fuzzy - Specifies to use the fuzzy mode. ND inspection checks if both the target and the source addresses exist in the binding table. Validate Source-MAC Target Port Unit From Port - To Port Select to enable or disable the validation of the source MAC address option here. When the Switch receives an ND message that contains a link-layer address, the source MAC address is checked against the link-layer address. The packet will be dropped if the link-layer address and the MAC addresses are different from each other. Tick this option to specify the target port. Select the Switch unit that will be used for this configuration here. Select the appropriate port range used for the configuration here. Click the Apply button to accept the changes made. Click the Edit button to re-configure the specific entry. Click the Delete button to remove the specified entry. IPv6 RA Guard This window is used to display and configure the IPv6 Router Advertisement (RA) guard settings. 527