Reference v4.1.0 Instruction Manual

Network OS Command Reference 403

53-1003115-01

ipv6 ra-guard

Protects against malicious Router Advertisements (RAs).

Synopsis ipv6 ra-guard

no ipv6 ra-guard

Operands None

Defaults None

Command Modes Interface configuration mode

Description Use this command to protect against malicious Router Advertisements (RAs).

When operating IPv6 in a shared Layer 2 (L2) network segment without complete SEcure Neighbor

Discovery (SEND) support by all devices connected or without the availability of the infrastructure

necessary to support SEND, there is always the risk of facing operational problems due to rogue

RAs.

RA-Guard protects the system against generated maliciously or unintentionally by unauthorized or

improperly configured routers connecting to the segment.

RA-Guard applies to an environment where all messages between IPv6 end-devices traverse the

controlled Layer 2 networking devices.

Usage Guidelines Enter no ipv6 ra-guard to disable this feature.

Examples

switch(conf-if-te-12/2/1)# ipv6 ra-guard