Service Manual

Version Description
9.0.0.0 Introduced on the Z9000.
8.3.19.0 Introduced on the S4820T.
8.3.11.1 Introduced on the Z9000.
8.3.7.1 Introduced on the S4810.
Example
Dell# show ipv6 neighbors
IPv6 Address Expires(min) Hardware Address State Interface VLAN CPU
--------------------------------------------------------------------
100::1 0.03 00:00:00:00:00:22 DELAY Te 1/12 - CP
fe80::200:ff:fe00:22 232 00:00:00:00:00:22 STALE Te 1/12 - CP
500::1 0.60 00:01:e8:17:5c:af REACH Te 1/13 - CP
fe80::200:ff:fe00:17 232 00:00:00:00:00:29 REACH Te 1/14 - CP
900::1 0.60 00:01:e8:17:5c:b1 STALE Po 23 - CP
400::1 0.60 00:01:e8:17:5c:ae REACH Te 1/2 Vl 100 CP
Dell#
IPv6 Router Advertisement (RA) Guard
The IPv6 RA guard provides support to perform conditional forwarding or blocking of the router advertisement messages that are received
at the network device platform. This functionality analyzes and lters the RAs sent by the devices and compares the conguration
information on the layer 2 device with the RA frame. Once the layer 2 device validates the content of the RA frame against the
conguration, it forwards the RA to its unicast or multicast destination. On failure to validate the RA frame content, the RA frame is
dropped.
The IPv6 RA guard supports two dierent modes:
• Host mode — When a policy with device role as host is applied on an interface, all the RA packets are dropped without validation. You
can also congure the host mode policy with VLAN option to drop the RA packets on that specic VLAN and port.
• Router mode — When a policy with device role as router is applied on an interface, all the RA packets are validated based on the
conguration information in the policy. Similarly, you can also apply this mode over any specic VLAN and the validation is performed
only for that particular VLAN RA packets.
To congure the IPv6 RA guard, use the following Dell Networking OS commands.
debug ipv6 nd ra-guard
Enable debugging for IPv6 RA guard snooping information.
Syntax
debug ipv6 nd ra-guard [interface_type slot/port | count value]
Parameters
interface_type slot/
port
Enter the one of the following interfaces and slot/port information:
• For a port channel interface, enter the keywords port-channel then a number.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet then
the slot/port
[/subport] information.
• For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/
port information.
count value Enter the keyword count then the number of debug outputs. The range is from 1 to
65534. The default is innity.
Defaults None
Command Modes EXEC Privilege
Neighbor Discovery Protocol (NDP) 1055