Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show access-security slaac-snooping state

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show access-security slaac-snooping state
<interface interface-name I all>

Description

Display the SLAAC snooping state information to show interfaces that are blocked. SLAAC snooping extracts address information from Duplicate Address Detection (DAD) packets exchanged during the SLAAC process to build the SLAAC snooping table. The IPv6-MAC address bindings in this table are used to inspect and validate NDP/IP packets sent by IPv6 clients using SLAAC.

To restore an interface that has been blocked, you must issue the request access-security slaac-snooping unblock command.

Options

interface (interface-name | all)

Display the SLAAC snooping state for the specified interface.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show access-security slaac-snooping state command. Output fields are listed in the approximate order in which they appear.

Table 1: show access-security slaac-snooping state Output Fields

Field Name

Field Description

Interface

Displays the interface on which SLAAC snooping is enabled.

State

Shows that the interface is blocked, meaning incoming DAD and ND requests on the interface will be dropped.

Sample Output

show access-security slaac-snooping state

content_copy zoom_out_map
user@device> show access-security slaac-snooping state             
Interface 		State
ge-0/0/40.0 	BLOCKED

Release Information

Command introduced in Junos OS Release 19.2R1.

footer-navigation