Enabling source MAC consistency check for ND packets


[CAUTION: ]

CAUTION:

If VRRP is used, disable source MAC consistency check for ND packets to prevent incorrect dropping of packets. With VRRP, the NA message always conveys a MAC address different than the Source Link-Layer Address option.


Use source MAC consistency check on a gateway to filter out ND packets that carry different source MAC addresses in the Ethernet frame header and the source link layer address option.

To enable source MAC consistency check for ND packets:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enable source MAC consistency check for ND packets.

ipv6 nd mac-check enable

Disabled by default.