Cisco Sx350

IPv6 First Hop Security
657 Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
29
switchxxxxxx(config-ra-guard)# exit
switchxxxxxx(config)# ipv6 nd raguard policy policy1
switchxxxxxx(config-ra-guard)# device-role router
switchxxxxxx(config-ra-guard)# exit
Example 3—The following example removes an attached RA Guard policy:
switchxxxxxx(config)# no ipv6 nd raguard policy policy1
Policy policy1 is applied on the following ports:
gi11, gi12
The policy1 will be detached and removed, are you sure [Y/N]Y
29.37 ipv6 nd raguard router-preference
To globally enable verification of the advertised Default Router Preference value in
RA messages, use the ipv6 nd raguard router-preference command in Global
Configuration mode. To return to the default, use the no form of this command.
Syntax
ipv6 nd raguard router-preference {[maximum
value ] [minimum value ]}
no ipv6 nd raguard router-preference [maximum] [minimum]
Parameters
• maximum value —Specifies the maximum allowed Advertised Default
Router Preference value. The following values are acceptable: low, medium
and high (see RFC4191). The value of the high boundary must be equal to or
greater than the value of the low boundary.
• minimum value —Specifies the minimum allowed Advertised Default Router
Preference value. The following values are acceptable: low, medium and
high (see RFC4191).
Default Configuration
Verification is disabled.