device-role
To specify the role of the device attached to the port, use the device-role command in IPv6 snooping policy
configuration mode or router advertisement (RA) guard policy configuration mode.
device-role {host| monitor| router}
Syntax Description
Sets the role of the device to host.host
Sets the role of the device to monitor.monitor
Sets the role of the device to router.router
Command Default
The device role is host.
Command Modes
RA guard policy configuration (config-ra-guard)
Command History
ModificationRelease
This command was introduced.8.0(1)
Usage Guidelines
The device-role command specifies the role of the device attached to the port. By default, the device role is
host, and therefore all the inbound router advertisement and redirect messages are blocked. If the device role
is enabled using the router keyword, all messages (router solicitation [RS], router advertisement [RA], or
redirect) are allowed on this port.
When the router or monitor keyword is used, the multicast RS messages are bridged on the port, regardless
of whether limited broadcast is enabled. However, the monitor keyword does not allow inbound RA or redirect
messages. When the monitor keyword is used, devices that need these messages will receive them.
Examples
The following example defines an RA guard policy name as raguard1, places the device in RA guard policy
configuration mode, and configures the device as the host:
switch(config)# ipv6 nd raguard policy raguard1
switch(config-ra-guard)# device-role host
Related Commands
DescriptionCommand
Defines the RA guard policy name and enters RA
guard policy configuration mode.
ipv6 nd raguard policy
Cisco Nexus 7000 Series Security Command Reference
272
D Commands
device-role
To Next Page
Loading...
