Configuration guidelines

Follow these guidelines when you configure ND detection:

• To create IPv6 static bindings with IP source guard, use the ipv6 source binding command. For more information, see "Configuring IP source guard."

• The DHCPv6 snooping table is created automatically by the DHCPv6 snooping module. For more information, see Layer 3—IP Services Configuration Guide.

• The ND snooping table is created automatically by the ND snooping module. For more information, see Layer 3—IP Services Configuration Guide.

• ND detection performs source check by using the binding tables of IP source guard, DHCPv6 snooping, and ND snooping. To prevent an ND-untrusted port from discarding legal ND packets in an ND detection-enabled VLAN, make sure that at least one of the three functions is available.

• When creating an IPv6 static binding with IP source guard for ND detection in a VLAN, specify the VLAN ID for the binding. If not, no ND packets in the VLAN can match the binding.