410
Configuring SAVI
Overview
Source Address Validation (SAVI) is applied on access devices. SAVI creates a table of bindings between
addresses and ports through other features such as ND snooping, DHCPv6 snooping, and IP Source
Guard, and uses those bindings to check the validity of the source addresses of DHCPv6 protocol
packets, ND protocol packets, and IPv6 data packets.
SAVI can be used in the following address assignment scenarios:
•
DHCPv6-only: The hosts connected to the SAVI-enabled device obtain addresses only through
DHCPv6.
•
SLAAC-only: The hosts connected to the SAVI-enabled device obtain addresses only through
Stateless Address Autoconfiguration (SLAAC).
•
SLAAC: The hosts connected to the SAVI-enabled device obtain addresses through
DHCPv6 and SLAAC.
The following section describes SAVI configurations in these address assignment scenarios.
After a port is down, the switch can wait for a period of delay time before deleting the DHCPv6
snooping entries and ND snooping entries for that port. The deletion delay time is configurable. This
delay ensures a valid IPv6 user to access the port for the event that a port goes down and resumes
during that period.
Configuring global SAVI
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enable the SAVI
function.
ipv6 savi strict
Disabled by default.
3.
Setting the deletion
delay time for SAVI.
ipv6 savi down-delay
time
The default setting is 30 seconds.
4.
Set the time to wait for a
duplicate address
detection (DAD) NA.
ipv6 savi dad-delay
value
Optional
One second by default.
If no DAD NA is received within the specified
time when the corresponding ND snooping
entry is in detect state, the ND snooping entry
changes to bound state.
