show access-security slaac-snooping state
Syntax
show access-security slaac-snooping state
<interface interface-name I all>
Description
Display the SLAAC snooping state information to show interfaces that are blocked. SLAAC snooping extracts address information from Duplicate Address Detection (DAD) packets exchanged during the SLAAC process to build the SLAAC snooping table. The IPv6-MAC address bindings in this table are used to inspect and validate NDP/IP packets sent by IPv6 clients using SLAAC.
To restore an interface that has been blocked, you must issue
the request access-security slaac-snooping unblock command.
Options
interface (interface-name | all) |
Display the SLAAC snooping state for the specified interface. |
Required Privilege Level
view
Output Fields
Table 1 lists the output fields for the show access-security slaac-snooping
state command. Output fields are listed in the approximate order
in which they appear.
Field Name |
Field Description |
|---|---|
|
Displays the interface on which SLAAC snooping is enabled. |
|
Shows that the interface is blocked, meaning incoming DAD and ND requests on the interface will be dropped. |
Sample Output
show access-security slaac-snooping state
user@device> show access-security slaac-snooping state Interface State ge-0/0/40.0 BLOCKED
Release Information
Command introduced in Junos OS Release 19.2R1.