H3C Technologies H3C S5560 Series Switches - Manual (Page 162)

147
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure the interface to
generate an EUI-64 IPv6
address.
ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
eui-64
By default, no EUI-64 IPv6 address is
configured on an interface.
Manual configuration
To configure an IPv6 global unicast address for an interface:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Configure an IPv6 global
unicast address for the
interface.
ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
By default, no IPv6 global unicast
address is configured on an interface.
Stateless address autoconfiguration
To configure an interface to generate an IPv6 address through stateless address autoconfiguration:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter interface view.
interface interface-type
interface-number
N/A
3. Enable stateless address
autoconfiguration.
ipv6 address auto
By default, no IPv6 global unicast
address is configured on an interface.
Using the undo ipv6 address auto
command on an interface removes all
IPv6 global unicast addresses and
link-local addresses that are
automatically generated on the
interface.
After this configuration, the interface automatically generates an IPv6 global unicast address by using
the address prefix in the received RA message and the interface ID. On an IEEE 802 interface (such as
an Ethernet interface or a VLAN interface), the interface ID is generated based on the MAC address of
the interface and is globally unique. An attacker can exploit this rule to identify the sending device easily.
To fix the vulnerability, you can configure the temporary address function. With this function, an IEEE 802
interface generates the following addresses:
• Public IPv6 address—Includes the address prefix in the RA message and a fixed interface ID
generated based on the MAC address of the interface.
• Temporary IPv6 address—Includes the address prefix in the RA message and a random interface
ID generated through MD5.