Restrictions and guidelines
When you configure ND attack detection, follow these restrictions and guidelines:
To prevent ND untrusted interfaces from dropping all received ND messages, make sure one or more of the these features are configured: IPv6 source guard static bindings, DHCPv6 snooping, and ND snooping.
To make the IPv6 source guard static bindings effective for ND attack detection, you must perform the following operations:
Specify the vlan vlan-id option in the ipv6 source binding command.
Enable ND attack detection for the same VLAN.