Enabling source MAC consistency check for ND packets
CAUTION: If VRRP is used, disable source MAC consistency check for ND packets to prevent incorrect dropping of packets. With VRRP, the NA message always conveys a MAC address different than the Source Link-Layer Address option. | ||
Use source MAC consistency check on a gateway to filter out ND packets that carry different source MAC addresses in the Ethernet frame header and the source link layer address option.
To enable source MAC consistency check for ND packets:
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Enable source MAC consistency check for ND packets. | ipv6 nd mac-check enable | Disabled by default. |