mac

427
Chapter 32 Commands for IPv6
Security RA
32.1 ipv6 security-ra enable
Command: ipv6 security-ra enable
no ipv6 security-ra enable
Function: Globally enable IPv6 security RA function, all the RA advertisement messages
will not be forwarded through hardware, but only sent to CPU to handle. The no operation
of this command will globally disable IPv6 security RA function.
Parameters: None.
Command Mode: Global Configuration Mode.
Default: The IPv6 security RA function is disabled by default.
Usage Guide: Only after enabling the global security RA function, the security RA on a
port can be enabled. Globally disabling security RA will clear all the configured security RA
ports. The global security RA function and the global IPv6 SAVI function are mutually
exclusive, so they can not be enabled at the same time.
Example: Globally enable IPv6 security RA.
Switch(config)#ipv6 security-ra enable
32.2 ipv6 security-ra enable
Command: ipv6 security-ra enable
no ipv6 security-ra enable
Function: Enable IPv6 security RA on a port, causing this port not to forward the received
RA message. The no ipv6 security-ra enable will disable the IPv6 security RA on a port.
Parameters: None.
Command Mode: Port Configuration Mode.
Default: IPv6 security RA function is disabled by default.
Usage Guide: Only after globally enabling the security RA function, can the security RA
on a port be enabled. Globally disabling security RA will clear all the configured security
RA ports.
Example: Enable IPv6 security RA on a port.
Switch(Config-If-Ethernet1/2)#ipv6 security-ra enable