nd-snooping mac-check

Description

This command enables verification of the hardware address field in ND snooping packets. When enabled, the ICMPv6 target link layer address field and the source MAC address must be the same for packets received on untrusted ports or else the packets are dropped. This ND snooping MAC verification is enabled by default.

The no form of the command disables ND snooping MAC verification.

Command context

config

Authority

Administrators or local user group members with execution rights for this command.

Examples

Enabling ND snooping MAC verification:

switch(config)# nd-snooping mac-check

Disabling ND snooping MAC verification:

switch(config)# no nd-snooping mac-check