Overview

Source Address Validation (SAVI) is applied on access devices. SAVI creates a table of bindings between addresses and ports through other features such as ND snooping, DHCPv6 snooping, and IP Source Guard, and uses those bindings to check the validity of the source addresses of DHCPv6 protocol packets, ND protocol packets, and IPv6 data packets.

SAVI can be used in the following address assignment scenarios:

• DHCPv6-only: The hosts connected to the SAVI-enabled device obtain addresses only through DHCPv6.

• SLAAC-only: The hosts connected to the SAVI-enabled device obtain addresses only through Stateless Address Autoconfiguration (SLAAC).

• DHCPv6+SLAAC: The hosts connected to the SAVI-enabled device obtain addresses through DHCPv6 and SLAAC.

The following section describes SAVI configurations in these address assignment scenarios.

After a port is down, the switch can wait for a period of delay time before deleting the DHCPv6 snooping entries and ND snooping entries for that port. The deletion delay time is configurable. This delay ensures a valid IPv6 user to access the port for the event that a port goes down and resumes during that period.