Users Guide

Examples
OS10(conf-ra_guard_policy_list)# managed-config-flag on
OS10(conf-ra_guard_policy_list)# managed-config-flag off
Supported
Releases
10.5.2.0 or later
match ra
Verifies the source IPv6 address, prefix address, and the source MAC address of the inspected messages.
Syntax
match ra {ipv6-access-list | ipv6-prefix-list | mac-access-list} name
Parameters
● ipv6-access-list name—Enter ipv6-access-list and the name of the access list.
● ipv6-prefix-list name—Enter ipv6-prefix-list and the name of the prefix list.
● mac-access-list name—Enter mac-access-list and the name of the MAC access list.
Default None
Command Mode RA GUARD POLICY LIST CONFIGURATION
Usage
Information
● If you do not configure this command, the system bypasses the verification process.
● If you configure all three access lists, OS10 matches the inspected packets against all the configured
policies.
● For the IPv6 access list, the system verifies only the IPv6 source address. For the MAC access list,
the system verifies only the source MAC address.
NOTE: If you have configured the policy using the match ra command, but not configured the
access lists or ACLs, the system bypasses the verification process. Generic ACL behavior applies
when the policy is attached to interface.
The no form of this command removes the configuration.
Example
OS10(conf-ra_guard_policy_list)# match ra ipv6-access-list
test_access_list
Supported
Releases
10.5.2.0 or later
other-config-flag
Verifies other advertised configuration parameter.
Syntax
other-config-flag {on | off}
Parameters
● on—Enables verification of the other advertised configuration parameter.
● off—Disables verification of the other advertised configuration parameter.
Default None
Command Mode RA GUARD POLICY LIST CONFIGURATION
Usage
Information
If you do not configure this command, the system bypasses the verification of the other configuration
parameter. The no form of this command removes the configuration.
Example
OS10(conf-ra_guard_policy_list)# other-config-flag on
Supported
Releases
10.5.2.0 or later
910 Layer 3