EasyManuals Logo

Cisco 300 Series User Manual

Cisco 300 Series
1117 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Page #530 background imageLoading...
Page #530 background image
IPv6 First Hop Security
OL-32830-01 Command Line Interface Reference Guide 530
25
switchxxxxxx(config)#
ipv6 nd raguard hop-limit minimum
3
maximum
100
25.34 ipv6 nd raguard managed-config-flag
To globally enable verification of the advertised the Managed Address
Configuration flag in RA messages, use the ipv6 nd raguard managed-config-flag
command in Global Configuration mode. To return to the default, use the no form of
this command.
Syntax
ipv6 nd raguard managed-config-flag {on | off}
no ipv6 nd raguard managed-config-flag
Parameters
• on—The value of the flag must be 1.
• off—The value of the flag must be 0.
Default Configuration
Verification is disabled.
Command Mode
Global Configuration mode
User Guidelines
This command enables verification of the advertised the Managed Address
Configuration flag (or the M flag) in an RA message (see RFC4861). This flag could
be set by an attacker to force hosts to obtain addresses through a DHCPv6 server
that might not be trustworthy.
Example
The following example enables M flag verification that checks if the value of the
flag is 0:
switchxxxxxx(config)#
ipv6 nd raguard managed-config-flag
off

Table of Contents

Other manuals for Cisco 300 Series

Questions and Answers:

Question and Answer IconNeed help?

Do you have a question about the Cisco 300 Series and is the answer not in the manual?

Cisco 300 Series Specifications

General IconGeneral
ModelCisco 300 Series
CategorySwitch
DimensionsVaries by model
WeightVaries by model
Power over Ethernet (PoE)Available on select models
ManagementWeb-based GUI, SNMP, CLI
VLANsUp to 256
Security FeaturesACLs, 802.1X, Port Security
Humidity10% to 90% non-condensing
Ports8, 16, 24, 48

Related product manuals