beautypg.com

Ipv6 ra-guard – Brocade Network OS Command Reference v4.1.0 User Manual

Page 441

background image

Network OS Command Reference

403

53-1003115-01

ipv6 ra-guard

2

ipv6 ra-guard

Protects against malicious Router Advertisements (RAs).

Synopsis

ipv6 ra-guard

no ipv6 ra-guard

Operands

None

Defaults

None

Command Modes

Interface configuration mode

Description

Use this command to protect against malicious Router Advertisements (RAs).

When operating IPv6 in a shared Layer 2 (L2) network segment without complete SEcure Neighbor
Discovery (SEND) support by all devices connected or without the availability of the infrastructure
necessary to support SEND, there is always the risk of facing operational problems due to rogue
RAs.

RA-Guard protects the system against generated maliciously or unintentionally by unauthorized or
improperly configured routers connecting to the segment.

RA-Guard applies to an environment where all messages between IPv6 end-devices traverse the
controlled Layer 2 networking devices.

Usage Guidelines

Enter no ipv6 ra-guard to disable this feature.

Examples

switch(conf-if-te-12/2/1)# ipv6 ra-guard

See Also

interface management