C613-50631-01 Rev A Command Reference for IE340 Series 978
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPV6 COMMANDS
IPV
6 ND RAGUARD
ipv6 nd raguard
Overview Use this command to apply the Router Advertisements (RA) Guard feature from the
Interface Configuration mode for a device port. This blocks all RA messages
received on a device port.
For more information about RA Guard, see the IPv6 Feature Overview and
Configuration Guide.
Use the no parameter with this command to disable RA Guard for a specified
device port.
Syntax
ipv6 nd raguard
no ipv6 nd raguard
Default RA Guard is not disabled by default.
Mode Interface Configuration for a port.
Usage notes Router Advertisements (RAs) are used by Routers to announce themselves on the
link. Applying RA Guard to a device port disallows Router Advertisements and
redirect messages. RA Guard blocks RAs from untrusted hosts. Blocking RAs stops
untrusted hosts from flooding malicious RAs and stops any misconfigured hosts
from disrupting traffic on the local network.
Enabling RA Guard on a port blocks RAs from a connected host and indicates the
port and host are untrusted. Disabling RA Guard on a port allows RAs from a
connected host and indicates the port and host are trusted. Ports and hosts are
trusted by default to allow RAs.
Example To enable RA Guard on port1.0.1-port1.0.4, use the following commands:
awplus# configure terminal
awplus(config)# interface port1.0.1-port1.0.4
awplus(config-if)# ipv6 nd raguard
To verify RA Guard is enabled on port1.0.1, use the command:
awplus# show running-config interface port1.0.1
To disable RA Guard on port1.0.1-port1.0.4, use the following commands:
awplus# configure terminal
awplus(config)# interface port1.0.1-port1.0.4
awplus(config-if)# no ipv6 nd raguard
When RA Guard is disabled on a port it is not displayed in show running-config
output.
Output Example output from using show running-config interface port1.0.1 to verify RA
Guard:
To Next Page
Loading...
Need help?
General
