nd-snooping mac-check


nd-snooping mac-check

no nd-snooping mac-check


This command enables verification of the hardware address field in ND snooping packets. When enabled, the ICMPv6 target link layer address field and the source MAC address must be the same for packets received on untrusted ports or else the packets are dropped. This ND snooping MAC verification is enabled by default.

The no form of the command disables ND snooping MAC verification.

Command context



Administrators or local user group members with execution rights for this command.


Enabling ND snooping MAC verification:

switch(config)# nd-snooping mac-check

Disabling ND snooping MAC verification:

switch(config)# no nd-snooping mac-check