UMN:CLI User ManualV8102284To activate/deactivate the ND inspection function on a VLAN, use the following command.Command Mode Descriptionipv6 nd inspection vlan VLANSGlobalActivates ND inspection on a VLAN.VLANS: VLAN ID (1-4094)no ipv6 nd inspection vlanVLANS Deactivates ND inspection on a VLAN.8.2.10.1 ND Access ListYou can exclude a given range of IP addresses from the ND inspection using ND accesslists. ND access lists are created by the ipv6 nd access-list command on the GlobalConfiguration mode. ND access list permits or denies the ND packets of a given range ofIPv6 addresses.To create/delete ND access control list (ACL), use the following command.Command Mode Descriptionipv6 nd access-list NAMEGlobalOpens ND ACL configuration mode and creates a NDaccess list.NAME: ND access list nameno ipv6 nd access-list NAME Deletes a ND access list.ipv6 nd access-list delete all Deletes all ND access lists.After opening ND Access List Configuration mode, the prompt changes fromSWITCH(config)# to SWITCH(config-nd-acl[NAME])#. After opening ND ACL Configura-tion mode, a range of IPv6 addresses can be configured to apply ND inspection.By default, ND Access List discards the Neighbor Discovery protocol packets, of all IPv6addresses and MAC addresses.To specify the IPv6 address and MAC address to forward the ND messages, use the fol-lowing command.Command Mode Descriptionpermit ipv6 {host X:X::X:X |X:X::X:X/M | any} mac {any | hostMACADDR} ND-ACLPermits ND packets based on their IPv6 address andMAC address, which have not learned before on NDinspection table.mac any: ignores sender MAC addressipv6 any: ignores sender IPv6 addresshost: sender hostX:X::X:X: sender IPv6 addressX:X::X:X/M: sender IPv6 network addressMACADDR: sender MAC addresspermit ipv6 range X:X::X:XX:X::X:X mac anyPermits ND packets of a given range of IPv6 address-es.i
