4 ipv6 nd-security learnprotect, 5 ip arp-security convert, Security learnprotect – PLANET XGS3-24040 User Manual
Page 297: Ip arp, Security convert
19-10
Switch(config)# ip arp-security learnprotect
19.4 ipv6 nd-security learnprotect
Command:
ipv6 nd-security learnprotect
no ipv6 nd-security learnprotect
Function:
Forbid ND learning function of IPv6 Version, the “no ipv6 nd-security learnprotect” command
re-enables ND learning function.
Parameter:
None.
Default:
ND learning enabled.
Command Mode:
Global Mode/ Interface Configuration.
Usage Guide:
This command is for preventing the automatic learning and updating of ND. Unlike ip nd-security
updateprotect, once this command implemented, there will still be timeout even if the switch keeps
sending Request/Reply messages.
Example:
Switch(Config-if-Vlan1)#ipv6 nd -security learnprotect
Switch(config)#ipv6 nd -security learnprotect
19.5 ip arp-security convert
Command:
ip arp-security convert
Function:
Change all of dynamic ARP to static ARP.
Parameter:
None
Command Mode:
Global Mode/ Interface configuration
Usage Guide:
This command will convert the dynamic ARP entries to static ones, which, in combination with
disabling automatic learning, can prevent ARP binding. Once implemented, this command will lose
its effect.
Example:
Switch(Config-if-Vlan1)#ip arp -security convert