Brocade FastIron Ethernet Switch Security Configuration Guide - Manual (Page 361)

IPv6 RA Guard
● Supported platforms for the IPv6 RA guard feature...................................................... 361
● Securing IPv6 address configuration............................................................................ 361
● IPv6 RA guard overview................................................................................................361
● Configuration notes and feature limitations for IPv6 RA guard..................................... 363
● Configuring IPv6 RA guard........................................................................................... 363
● Example of configuring IPv6 RA guard......................................................................... 364
Supported platforms for the IPv6 RA guard feature
Lists the supported platforms for the IPv6 RA guard feature.
The following table lists the supported platforms for the IPv6 RA guard feature.
Feature ICX 6430 ICX 6450 FCX ICX 6610 ICX 6650 FSX 800
FSX 1600 ICX 7750
IPv6 RA Guard 08.0.01 08.0.01 08.0.01 08.0.01 08.0.01 08.0.01 08.0.10
NOTE
This feature is supported with both Layer 2 and Layer 3 images. The ICX 6430 supports only the Layer
2 image.
Securing IPv6 address configuration
In a IPv6 domain, a node can obtain an IPv6 address using the following two mechanisms:
• IPv6 address auto-configuration using router advertisements
• DHCPv6 protocol
In a typical man-in-middle (MiM) attack, the attacker can spoof as a router with spurious router
advertisements.To prevent such attacks, IPv6 RA guard helps to secure the IPv6 address configuration
in the network.
IPv6 RA guard overview
In an IPv6 network, devices are configured to send IPv6 Router Advertisements (RAs). Router
advertisement and solicitation messages enable a node on a link to discover the routers on the same
FastIron Ethernet Switch Security Configuration Guide 361
53-1003088-03