Cisco 300 Series User Manual

IPv6 First Hop Security
OL-32830-01 Command Line Interface Reference Guide 524
25
Example
The following example enables the switch to drop an NDP message whose
link-layer address in the source/target link-layer option does not match the MAC
address:
switchxxxxxx(config)# ipv6 nd inspection validate source-mac
25.30 ipv6 nd raguard
To globally enable the Router Advertisements (RA) guard feature on a VLAN, use
the ipv6 nd raguard command in VLAN Configuration mode. To return to the
default, use the no form of this command.
Syntax
ipv6 nd raguard
no ipv6 nd raguard
Parameters
N/A
Default Configuration
RA Guard on a VLAN is disabled.
Command Mode
Interface (VLAN) Configuration mode
User Guidelines
Use the ipv6 nd raguard command, to enable IPv6 RA Guard on a VLAN.
RA Guard discards RA, CPA, and ICMP Redirect messages received on ports that
are not configured as router (see the device-role command).
RA Guard validates received RA messages based on an RA Guard policy
attached to the source port.
RA Guard is performed before ND inspection.

Cisco 300 Series Specifications

General

Model	Cisco 300 Series
Category	Switch
Dimensions	Varies by model
Weight	Varies by model
Power over Ethernet (PoE)	Available on select models
Management	Web-based GUI, SNMP, CLI
VLANs	Up to 256
Security Features	ACLs, 802.1X, Port Security
Humidity	10% to 90% non-condensing
Ports	8, 16, 24, 48