5 savi check binding, 5 savi check binding -3 – PLANET XGS3-24042 User Manual
Page 1050
58-3
Configure the port as slaac trust and RA trust port, this port will not establish dynamic slaac binding
any more and forwards RA packets. The no command deletes the port trust function.
Command Mode:
Port Mode.
Default:
Disable port trust function.
Usage Guide:
If the port disables ipv6 nd snooping trust function, it is considered to untrust RA packets port and
discards all RA packets. Setting the port as trust attribute, enable the uplink port of the switch with
SAVI or the conjoint port between switches with SAVI generally.
Example:
Set the port ethernet1/0/1 to be nd trust port.
Switch(config)#interface ethernet1/0/1
Switch(config-if-ethernet1/0/1)#ipv6 nd snooping trust
58.1.5 savi check binding
Command:
savi check binding <simple | probe> mode
no savi check binding mode
Function:
Configure the check mode for conflict binding, the no command deletes the check mode.
Parameter:
simple mode: only check the port state for conflict binding, if the state is up, keep the conflict
binding and do not set new binding. If the state is down, delete the conflict binding to set a new one
probe mode: besides checking the port state for conflict binding, it will send NS packets to probe
the usability of the corresponding user when the port state is up. If receiving the responded NA
packets from users, it will keep the current conflict binding and does not set new binding, otherwise
delete the conflict binding to set new one.
Command Mode:
Global Mode.
Default:
Disable the conflict binding check mode by default. It will adopt the mode that delete the conflict
binding directly to set new one.
Usage Guide:
It is recommended to configure probe mode to prevent the attack that the spurious address conflict
binding deletes the legal user binding.