Installation Guide

Examples
To congure the IPv6 ND proxy static route by specifying the destination prex and the outgoing interface:
NOTE
As per the topology mentioned in the packet ow, if the IPv6 ND proxy is congured on R2, then this static route can
be congured on R1 with the destination prex being 2002::/64. The static route can also be congured with
outgoing interface as ve, such as ve 10.
R1(config)#
R1(config)# ipv6 route 2002::/64 ethernet 1/1
R1(config)#
R1(config)# ipv6 route 2003::/64 ve 10
R1(config)# vrf green
R1(config-vrf-green)# address-family ipv6
R1(config-vrf-green-ipv6)# ipv6 route 2002::/64 eth 1/1
R1(config)#vrf green
R1(config-vrf-green)# address-family ipv6
R1(config-vrf-green-ipv6)# ipv6 route 2003::/64 ve 10
To show the
running-cong (with truncated output showing only the static route):
R1(config)# ipv6 route 2002::/64 ethernet 1/1
R1(config)# ipv6 route 2003::/64 ve 10
vrf green
rd 66:66
address-family ipv6
ipv6 route 2002::/64 ethernet 1/1
ipv6 route 2003::/64 ve 10
R1(config)#exit-vrf
DRBG Health Test on IPsec LP
Deterministic Random Bit Generator (DRBG) health and error checks are performed on the IPsec line card used in the MLX Series
devices.
The FIPS self-test is executed at system startup, which includes DRBG health and error checks. This startup test executes a known
answer test, which includes DRBG health and error checks.
The DRBG Known Answer Test (KAT) and health test are performed during:
• System boot-up and at regular intervals.
• Periodic testing after 2^24 uses, during instantiate and reseed.
• DRBG check immediately after powering on the system.
The type of DRBG mechanism and the cryptographic primitives used (e.g., AES-128 or SHA-256), are as follows:
• Type of DRBG mechanism: Hash Based
• Cryptographic primitives used: SHA-256
Security strengths of the cryptographic algorithms supported by the implementation: 256
The implementation of this feature (e.g., prediction resistance, personalization string, additional input) are as follows:
• Prediction Resistance is not TRUE.
• Personalization String Length = 0
• Additional Input Length = 0
DRBG Health Test on IPsec LP
Extreme Routing MLX Series Hardware Installation Guide
53-1004203-04 243