device-role (IPv6 nd inspection)
To specify the role of the device attached to the port, use the device-role command in neighbor discovery
(ND) inspection policy configuration mode.
device-role {host | monitor | router | switch}
Syntax Description
Sets the role of the attached device to host.host
Sets the role of the attached device to monitor.monitor
Sets the role of the attached device to router.router
Sets the role of the attached device to switch.switch
Command Default
The device role is host.
Command Modes
ND inspection policy configuration
Command History
ModificationRelease
This command was introduced.Cisco IOS XE 3.3SECisco IOS XE 3.3SE
Usage Guidelines
The device-role command specifies the role of the device attached to the port. By default, the device role is
host, and therefore all the inbound router advertisement and redirect messages are blocked. If the device role
is enabled using the router keyword, all messages (router solicitation [RS], router advertisement [RA], or
redirect) are allowed on this port.
When the router or monitor keyword is used, the multicast RS messages are bridged on the port, regardless
of whether limited broadcast is enabled. However, the monitor keyword does not allow inbound RA or redirect
messages. When the monitor keyword is used, devices that need these messages will receive them.
The switch keyword indicates that the remote device is a switch and that the local switch is now operating in
multiswitch mode; binding entries learned from the port will be marked with trunk_port preference level. If
the port is configured as a trust-port, binding entries will be marked with trunk_trusted_port preference level.
Examples
The following example defines a Neighbor Discovery Protocol (NDP) policy name as policy1, places the
device in ND inspection policy configuration mode, and configures the device as the host:
Device(config)# ipv6 nd inspection policy policy1
Device(config-nd-inspection)# device-role host
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
744
device-role (IPv6 nd inspection)