Cisco Nexus 7000 Series - Other-Config-Flag

other-config-flag
To verify the advertised “other” configuration parameter, use the other-config-flag command in RA guard
policy configuration mode.
other-config-flag {on| off}
Syntax Description
Verification is enabled.on
Verification is disabled.off
Command Default
Verification is not enabled.
Command Modes
RA guard policy configuration (config-ra-guard)
Command History
ModificationRelease
This command was introduced.8.0(1)
Usage Guidelines
The other-config-flag command enables verification of the advertised "other" configuration parameter (or
"O" flag). This flag could be set by an attacker to force hosts to retrieve other configuration information
through a Dynamic Host Configuration Protocol for IPv6 (DHCPv6) server that may not be trustworthy.
Examples
The following example shows how the command defines a router advertisement (RA) guard policy name as
raguard1, places the router in RA guard policy configuration mode, and enables O flag verification:
switch(config)# ipv6 nd raguard policy raguard1
switch(config-ra-guard)# other-config-flag on
Related Commands
DescriptionCommand
Defines the RA guard policy name and enters RA
guard policy configuration mode.
ipv6 nd raguard policy
Cisco Nexus 7000 Series Security Command Reference
525
O Commands
other-config-flag