Cisco Nexus 7000 Series - Managed-Config-Flag

managed-config-flag
To verify the advertised managed address configuration parameter, use the managed-config-flag command
in RA guard policy configuration mode.
managed-config-flag {on| off}
Syntax Description
Verification is enabled.on
Verification is disabled.off
Command Default
Verification is not enabled.
Command Modes
RA guard policy configuration (config-ra-guard)
Command History
ModificationRelease
This command was introduced.8.0(1)
Usage Guidelines
The managed-config-flag command enables verification of the advertised managed address configuration
parameter (or "M" flag). This flag could be set by an attacker to force hosts to obtain addresses through a
DHCPv6 server that may not be trustworthy.
Examples
The following example shows how the command defines a router advertisement (RA) guard policy name as
raguard1, places the router in RA guard policy configuration mode, and enables M flag verification:
switch(config)# ipv6 nd raguard policy raguard1
switch(config-ra-guard)# managed-config-flag on
Related Commands
DescriptionCommand
Defines the RA guard policy name and enters RA
guard policy configuration mode.
ipv6 nd raguard policy
Cisco Nexus 7000 Series Security Command Reference
504
M Commands
managed-config-flag