beautypg.com

Prefix-list, Raguard, Prefix-list raguard – Brocade FastIron Ethernet Switch Security Configuration Guide User Manual

Page 375

background image

Allows RAs of low and medium router preference.

Modes

RA guard policy configuration

Usage Guidelines

If a very low value is set, then the RAs expected to be forwarded might get dropped.

Examples

The following example shows how to set the RA guard policy router preference:

Brocade(config)# ipv6 raguard policy p1

Brocade(config-ipv6-RAG-policy p1)# preference-maximum low

prefix-list

Associates an IPv6 prefix list with an RA guard policy. The no form of this command dissociate the
prefix list from the RA guard policy.

Syntax

prefix-list name

no prefix-list name

Parameters

name

Name of the IPv6 prefix list to associate with the RA guard policy.

Modes

RA guard policy configuration

Usage Guidelines

This command associates an IPv6 prefix list with an RA guard policy so that only the RAs that have the
given prefix are forwarded. You must provide the name of an IPv6 prefix list already configured using
the ipv6 prefix-list command. For more information on configuring an IPv6 prefix list using the ipv6
prefix-list
command, see the FastIron Ethernet Switch Layer 3 Routing Configuration Guide .

Only one prefix list can be associated with an RA guard policy. If the command is configured twice with
different prefix ists, the latest configured prefix list is associated with the RA guard policy.

Examples

The following example shows how to associate an IPv6 prefix list with an RA guard policy:

Brocade(config)# ipv6 prefix-list raguard-prefix1

Brocade(config)# ipv6 raguard policy p1

Brocade(config-ipv6-RAG-policy p1)# prefix-list raguard-prefix1

raguard

Configures the current interface as a trusted, untrusted or host RA guard port. The no form of this
command disables the current trusted or untrusted configuration. For example, the no raguard trust
command on a untrusted port interface, does not go into effect.

Syntax

raguard { trust | untrust | host }

Parameters

trust

prefix-list

FastIron Ethernet Switch Security Configuration Guide

375

53-1003088-03