You must enable javascript in order to view this page or you can go
here
to view the webhelp.
Contents
Search
Loading, please wait ...
Aruba 2930F / 2930M IPv6 Configuration Guide for ArubaOS-Switch 16.10
Home
About this guide
Applicable products
Switch prompts used in this guide
IPv6 Addressing Configuration
General configuration steps
Configuring IPv6 addressing
Enabling IPv6 with an automatically configured link-local address
Viewing currently configured IPv6 unicast addresses
Enabling autoconfiguration of a global unicast address and a default router identity on a VLAN
Viewing current IPv6 autoconfiguration settings
Default IPv6 gateway
Enabling DHCPv6
Viewing configured DHCPv6 addresses
Configuring a static IPv6 address on a VLAN
Statically configuring a link-local unicast address
Statically configuring a global unicast address
Viewing the currently configured static IPv6 addresses per-VLAN
Operating notes for DHCPv6
Duplicate address detection (DAD) for statically configured addresses
IPv6 loopback interfaces
Assigning an IPv6 address to a loopback interface
Displaying loopback interface configurations
Disabling IPv6 on a VLAN
Neighbor Discovery (ND)
DHCPv6 client
ipv6 dhcp-client
Duplicate Address Detection (DAD)
DAD operation
Configuring DAD
Operating notes for ND
Viewing the current IPv6 addressing configuration
Router access and default router selection
Router advertisements
Router solicitations
Default IPv6 router
Router redirection
View IPv6 gateway, route, and router neighbors
Viewing gateway and IPv6 route information
Viewing IPv6 router information
Address lifetimes
Preferred and valid address lifetimes
Preferred lifetime
Valid lifetime
IPv6 Management Features
Viewing and clearing the IPv6 Neighbor Cache
Viewing the Neighbor Cache
Clearing the Neighbor Cache
IPv6 Telnet operations
Using outbound Telnet to another device
Viewing the current telnet activity on a switch
Viewing inbound and outbound Telnet only sessions
Enabling or disabling inbound or outbound Telnet access
Viewing the current inbound or outbound Telnet configuration
SNTP and Timep
Configuring (enabling or disabling) the SNTP mode
Configuring an IPv6 address for an SNTP server
Configuring (enabling or disabling) the Timep mode
TFTP file transfers over IPv6
Enabling TFTP for IPv6
Copying files over IPv6 using TFTP
Using auto-TFTP for IPv6
SNMP management for IPv6
Supported SNMP features
Supported SNMP configuration commands
SNMPv1 and V2c
SNMPv3
IP preserve for IPv6
Configuring IP preserve
IP preserve configuration file download to an IPv6-based switch
Verifying how IP preserve was implemented in a switch
IPv6 Management Security Features
Authorized IP managers for IPv6
Configuring authorized IP managers for switch access
Using a mask to configure authorized management stations
Configuring single station access
Multiple station access configuration
Viewing an authorized IP managers configuration
Authorizing manager access
Editing an existing authorized IP manager entry
Deleting an authorized IP manager entry
Secure Shell (SSH) for IPv6
Configuring SSH for IPv6
Viewing SSH configuration
Viewing SSH only sessions
SCP and SFTP for IPv6
Multicast Listener Discovery snooping
Multicast addressing
Multicast Listener Discovery(MLD)
MLD snooping
MLD operation
Forwarding in MLD snooping
Enabling or disabling MLD snooping on a VLAN
ipv6 mld version
ipv6 mld
Queries
ipv6 mld querier
ipv6 mld query-interval
ipv6 mld query-max-response-time
ipv6 mld robustness
ipv6 mld last-member-query-interval
ipv6 mld fastlearn
Leaves
Fast leaves and forced fast leaves
ipv6 mld fastleave
ipv6 mld forcedfastleave
Current MLD status
show ipv6 mld
show ipv6 mld link-local
show ipv6 mld vlan link-local
Current MLD configuration
show ipv6 mld config
Commands to list currently joined ports
show ipv6 mld statistics
Counters
show ipv6 mld vlan counters
Reset MLD state
Router alert
Listeners and joins
IPv6 Access Control Lists (ACLs)
Introduction to IPv6 ACLs
Overview of options for applying IPv6 ACLs on the switch
Static ACLs
RADIUS-assigned ACLs
Overview of IPv6 ACLs
Types of ACLs
Concurrent IPv4 and IPv6 ACLs
IPv6 ACL applications
RACL applications
VACL applications
IPv6 static port ACL applications
RADIUS-assigned (dynamic) port ACL applications
802.1X user-based and port-based applications
Operating notes for IPv6 applications
Multiple ACL assignments on an interface
Filtering inbound traffic with multiple ACLs
Filtering outbound traffic
Permitting traffic filtered through multiple ACLs (example)
Features common to all ACLs
General steps for planning and configuring ACLs
IPv6 ACL operation
The packet-filtering process
IPv6 traffic management and improved network performance
Security
Guidelines for planning the structure of an ACL
ACL configuration and operating rules
How an ACE uses a mask to screen packets for matches
Prefix usage differences between ACLs and other IPv6 addressing
Planning an ACL application
Configuring and assigning an ACL
Overview of configuring and assigning an ACL
General steps for implementing ACLs
Permit/deny options
ACL configuration structure
ACL configuration factors
The sequence of entries in an ACL is significant
Allowing for the implied deny function
A configured ACL has no effect until applied to an interface
Assignment of an ACL name to an interface
Creating an ACL using the CLI
General ACE rules
Using CIDR notation to enter the IPv6 ACL prefix length
Configuration commands
Overview of IPv6 ACL filters
Commands to create, enter, and configure an ACL
Configuring ACEs in an ACL
Options for TCP and UDP traffic in IPv6 ACLs
Filtering ICMP traffic
IPv6 ACL configuration (example)
IPv6 ACL configuration in a routed environment (example)
Filtering routed IPv6 traffic
Filtering routed or switched IPv6 traffic inbound or outbound on a VLAN
Filtering inbound or outbound IPv6 traffic per port and trunk
Deleting an ACL
Editing an existing ACL
General editing rules
Sequence numbering in ACLs
Inserting an ACE in an existing ACL
Deleting an ACE from an existing ACL
Resequencing the ACEs in an IPv6 ACL
Attaching a remark to an ACE
Viewing ACL configuration data
Viewing an ACL summary
Viewing the content of all ACLs on the switch
Viewing the IPv4 and IPv6 VACL assignments for a VLAN
Viewing static port (and trunk) ACL assignments
Viewing the content of a specific ACL
Viewing all ACLs and their assignments in the switch startup-config file and running-config file
Creating or editing ACLs offline
The offline process
Enable IPv6 ACL “deny” logging
Requirements for using IPv6 ACL logging
ACL logging operation
Enabling ACL logging on the switch
Monitoring static ACL usage
ACE counter operation
Resetting ACE hit counters to zero
IPv6 counter operation with multiple interface assignments
IPv4 counter operation with multiple interface assignments
General ACL operating notes
Unable to delete an ACL in the running configuration
IPv6 Routing Basics
IPv6 routing overview
Dual-stack IPv4/IPv6 operation
IPv6 networks and subnets
VLANs and routing
Link-local
Global unicast
IPv6 management interface
IPv6 routing operation
Concurrent static and dynamic routing operation
Router Advertisements (RAs)
DHCPv6-relay
Enabling IPv6 routing
Configuring global IPv6 routing parameters
Configuring the IPv6 hop limit
Configuring the IPv6 default route
The IPv6 routing table
Different route types in the IPv6 routing table
Routing table content
Destination network for switches
Gateway for forwarding routed traffic for switches
Metric and administrative distance for switches
Viewing the routing table for switches
IPv6 Static Routing
Advantages of static routing
Disadvantages of static routing
Static route types
Static routing default settings
Static route states follow VLAN states
Static routes for ECMP applications
Configuring static IPv6 routes
Viewing static route information
Equal-cost multipath routing (ECMP)
IPv6 Router Advertisements (RAs)
Overview of IPv6 RA
RA general operation
RA basics
Setting up your IPv6 RA policy
Configuring IPv6 RAs
Configuring RAs on multiple switches with a common VLAN
Global configuration context commands
Enabling or disabling IPv6 RA generation
Enabling or disabling IPv6 routing
VLAN context Neighbor Discovery (ND) configuration
Configuring DHCPv6 service requirements
Configuring the range for intervals between RA transmissions on a VLAN
Setting or changing the hop-limit for host-generated packets
Setting or changing the default router lifetime
Changing the reachable time duration for neighbors
Setting or changing the neighbor discovery retransmit timer
Configuring the global unicast prefix and lifetime for hosts on a VLAN
Suppressing RAs on a VLAN
Restricting IPv6 RAs
Viewing the RA configuration
DHCPv6-Relay
DHCPv6 request forwarding
DHCPv6-relay Helper addresses
Unicast Helper address
DHCPv6-relay multicast Helper address
Using multicast Helper address
Enabling DHCPv6-relay operation
Configuring DHCPv6-relay
Multiple-hop forwarding of DHCPv6 service requests
Viewing the DHCPv6-relay configuration
Operating notes for DHCPv6
OSPFv3 routing
Overview of OSPFv3
Single-area OSPF
Hello packets
Link-state advertisements (LSAs)
OSPFv3 area types
Normal area
Backbone area
Stub area
Not-so-stubby-area (NSSA)
OSPFv3 router types
Interior routers
Area border routers (ABRs)
Configuring an ABR to use a virtual link to the backbone
Configuring ranges on an ABR to reduce advertising to the backbone
Autonomous system boundary router (ASBR)
Designated routers
OSPFv3 activation and dynamic configuration
Configuration procedures for OSPFv3
Configuration rules
OSPFv3 global and interface settings
Configuring a virtual link
area virtual-link router-id
Adjusting a dead interval on a virtual link
area virtual-link dead-interval
adjust hello interval
adjust retransmit interval
adjust transit delay
ipv6 ospf3 passive
show ipv6 ospf3 virtual-link
show ipv6 ospf3 virtual-neighbor
OSPFv3 passive
router ospf3 redistribute
Command to modify the default metric for redistribution
Command to modify the redistribution metric type
Reducing AS-external-LSAs and inter-area-prefix-LSAs
Algorithm for AS-external-LSA reduction
About replacing inter-area-prefix-LSAs and type-7-external-LSA default routes with an AS-external-LSA default route
Enforcing strict LSA operation for graceful restart helper mode
route-map name
router ospf3 trap
Troubleshooting: Logging neighbor adjacency change events
logging neighbor-adjacency
Commands to activate OSPFv3
Commands to configure OSPFv3 on the routing switch
ip router-id
ipv6 unicast-routing
router ospf3 [enable|disable]
About assigning the routing switch to OSPFv3 areas
area [ospf3–area-id|backbone][ normal ]
area ospf3–area-id stub/area ospf3–area id nssa
Command to enable OSPFv3 on an interface and assigning one or more VLANs to each area
vlan vid ipv6 ospf3
Command to assign IPv6 loopback addresses to an area
interface loopback
route-map name
router ospf3 redistribute
Command to modify the default metric for redistribution
Command to modify the redistribution metric type
Redistributing/Assigning Loopback IPv6 address to OSPFv3
Verifying the OSPFv3 redistribution of loopback interfaces
OSPFv3 redistribution of loopback addresses
Configuring for external route redistribution in an OSPFv3 domain
Influencing route choices by changing the administrative distance default
distance [external|inter-area|intra-area]
restart strict-lsa
Enforcing strict LSA operation for graceful restart helper mode
Adjusting performance by changing the VLAN interface settings
ipv6 ospf3 cost
ipv6 ospf3 dead-interval
ipv6 ospf3 hello-interval
ipv6 ospf3 priority
ipv6 ospf3 retransmit-interval
ipv6 ospf3 transit-delay
Viewing a summary of OSPFv3 configuration information
show ipv6 route ospf3
show ipv6 ospf3 area
show ipv6 ospf3 interface
show ipv6 ospf3 neighbor
show/clear ipv6 ospf3 statistics
show ipv6 ospf3 link-state as-scope
ospf3 link-state area-scope
show ospf3 link-state link-scope information
show ipv6 ospf3 redistribute
show ipv6 ospf3 virtual-link
show ipv6 ospf3 virtual-neighbor
show ipv6 ospf3 spf-log
show running
router ospf3 trap
debug ipv6 ospf3
Graceful shutdown of OSPFv3 Routing
Modules operating in non-stop mode
ip load-sharing
Equal-cost multi-path routing
Influencing route choices by changing the default administrative distance
Adjusting performance by changing the VLAN interface settings
PIMv6
Configuring PIMv6
router pim6
enable|disable
join-prune-interval
rp-address
rpf-override
spt-threshold
state-refresh
trap
bsr-candidate
bsr-candidate bsm-interval
bsr-candidate hash-mask-length
bsr-candidate priority
bsr-candidate source-ip-vlan
rp-candidate
rp-candidate hold-time
rp-candidate priority
rp-candidate group-prefix
rp-candidate source-ip-vlan
Configuring PIMv6 DM
ipv6 pim6-dense
graft-retry-interval
hello-delay
hello-interval
lan-prune-delay
max-graft-retries
override-interval
propagation-delay
Configuring PIMv6 SM
ipv6 pim6-sparse
dr-priority
hello-delay
hello-interval
lan-prune-delay
override-interval
propagation-delay
Viewing PIMv6 information
show ipv6
show ipv6 pim6
show ipv6 pim6 pending
show ipv6 pim6 bsr
show ipv6 pim6 bsr local
show ipv6 pim6 bsr elected
show ipv6 pim6 rp-set
show ipv6 pim6 rp-candidate
show ipv6 pim6 rp-candidate config
show ipv6 pim6 rpf-override
show ipv6 pim6 rpf-override source
show ipv6 pim6 interface
show ipv6 pim6 neighbor
show ipv6 pim6 mroute
Service insertion
IPv6 Diagnostic and Troubleshooting
ICMP rate-limiting
Ping for IPv6 (Ping6)
Traceroute for IPv6
DNS resolver for IPv6
DNS configuration
ip dns server-address priority
ip dns domain-name
Viewing the current DNS configuration
Operating notes for DNS
Debug/Syslog for IPv6
Configuring debug and Event Log messaging
Debug command
Configuring debug destinations
Configuring an IPv6 syslog server
Logging command
Viewing the debug/syslog for configuration
IPv6 network defense ND snooping and detection
Commands
Configuring ND MAC-check globally
Enabling ND Snooping globally
Enabling ND Snooping on a VLAN range
Clearing ND Snooping bindings
Configure the prefix lists
Configuring maximum learn entries on a port
Maximum number of ND Snooping entries
Configuring a port as trusted for ND Snooping
Clearing IPv6 ND Snooping statistics
Configuring traps for ND Snooping
Enable debug for IPv6 ND Snooping
Show commands
show IPv6 ND snooping
show IPv6 ND Snooping binding entries
show ipv6 nd snooping statistics
show snmp-server traps
Change to existing command: show qos resources
Debug messages for ND snooping
Websites
Support and other resources
Accessing Hewlett Packard Enterprise Support
Accessing updates
Remote support
Warranty information
Regulatory information
Documentation feedback
Your browser does not support iframes.