beautypg.com

4 ipv6 nd-security learnprotect, 5 ip arp-security convert, Security learnprotect – PLANET XGS3-24040 User Manual

Page 297: Ip arp, Security convert

background image


19-10

Switch(config)# ip arp-security learnprotect

19.4 ipv6 nd-security learnprotect

Command:

ipv6 nd-security learnprotect

no ipv6 nd-security learnprotect

Function:

Forbid ND learning function of IPv6 Version, the “no ipv6 nd-security learnprotect” command

re-enables ND learning function.

Parameter:

None.

Default:

ND learning enabled.

Command Mode:

Global Mode/ Interface Configuration.

Usage Guide:

This command is for preventing the automatic learning and updating of ND. Unlike ip nd-security

updateprotect, once this command implemented, there will still be timeout even if the switch keeps

sending Request/Reply messages.

Example:

Switch(Config-if-Vlan1)#ipv6 nd -security learnprotect

Switch(config)#ipv6 nd -security learnprotect

19.5 ip arp-security convert

Command:

ip arp-security convert

Function:

Change all of dynamic ARP to static ARP.

Parameter:

None

Command Mode:

Global Mode/ Interface configuration

Usage Guide:

This command will convert the dynamic ARP entries to static ones, which, in combination with

disabling automatic learning, can prevent ARP binding. Once implemented, this command will lose

its effect.

Example:

Switch(Config-if-Vlan1)#ip arp -security convert