Cisco Nexus 7000 Series - Ipv6 Nd Raguard Policy

ipv6 nd raguard policy
To define the router advertisement (RA) guard policy name and enter RA guard policy configuration mode,
use the ipv6 nd raguard policy command in global configuration mode.
ipv6 nd raguardpolicy policy-name
Syntax Description
IPv6 RA guard policy name.
policy-name
Command Default
An RA guard policy is not configured.
Command Modes
Global configuration (config)#
Command History
ModificationRelease
This command was introduced.8.0(1)
Usage Guidelines
Use the ipv6 nd raguard policy command to configure RA guard globally on a router. Once the device is in
ND inspection policy configuration mode, you can use any of the following commands:
•
device-role
•
limit address-count
•
sec-level minimum
•
trusted-port
•
validate source-mac
After IPv6 RA guard is configured globally, you can use the ipv6 nd raguard attach-policy command to
enable IPv6 RA guard on a specific interface.
Examples
The following example shows how to define the RA guard policy name as policy1 and place the device in
policy configuration mode:
switch(config)# ipv6 nd raguard policy policy1
switch(config-ra-guard)#
Cisco Nexus 7000 Series Security Command Reference
450
I Commands
ipv6 nd raguard policy