Tp-Link T2600G-28MPS (TL-SG3424P) [287/379] Nd snooping

Превью страниц Страница 287 / 379
IP Address:
Displays the IP Address of the Host.
MAC Address:
Displays the MAC Address of the Host.
VLAN ID:
Displays the VLAN ID here.
Port:
Displays the number of port connected to the Host.
Protect Type:
Displays the Protect Type of the entry.
Active Status:
Displays the active status of the entry.
Collision:
Displays the Collision status of the entry.
Warning: Indicates that the collision may be
caused by
the MSTP function.
Critical:
Indicates that the entry has a collision with the
other entries.
14.2.3 ND Snooping
ND snooping maintains an ND snooping table using the DAD NS messages in IPv6. ND
snooping entries in this table is used to:
Cooperate with the IPv6-MAC binding.
Cooperate with the ND detection feature.
Cooperate with the IPv6 Source Guard feature.
1. Creating an ND snooping entry
The switch only uses received DAD NS messages to create ND snooping entries.
2. Updating an ND snooping entry
Upon receiving an ND packet, the switch searches the ND snooping table for an entry
containing the source IPv6 address of the packet. The switch matches the ND packet’s MAC
address and the receiving port against that in the entry.
If both of them match those in the entry, the switch updates the aging time in this ND
snooping entry.
If neither of them matches the entry, the switch initiates a verification process.
1) The switch checks the validity of the existing ND snooping entry.
The switch sends out an NS message according to the ND snooping entry. If a
corresponding NA message (whose source IPv6 address, source MAC address,
receiving port, and source VLAN are consistent with those of the existing entry) is
received, the device updates the aging time of the existing entry. If no corresponding
NA message is received within one second after the NS message is sent, the device
starts to check the validity of the received ND packet.
2) The switch checks the validity of the received ND packet.
The switch sends out an NS message to verify the reachability of the ND packet
(marked as packet A). The NS message’s destination IPv6 address is specified as the
source IPv6 address of packet A. If a corresponding NA message (whose source IPv6
275

Содержание

299