86 MES1000, MES2000 Ethernet Switches
Table 5.62 —EXEC mode commands
Show information on the tunnel settings.
Example execution of commands
Enable tunnelling interface, define the tunnel domain name MES2124, define the local IP address
192.168.16.88.
console# configure
console(config)# interface tunnel 1
console(config-tunnel)# tunnel mode ipv6ip isatap
console(config-tunnel)# tunnel isatap router MES2124
console(config-tunnel)# tunnel source ip-address 192.168.16.88
5.15.3 IPv6 RA guard function configuration
IPv6 RA guard function provides attacks protection based on sending fake Router Advertisement
packets and allows sending messages only from trusted ports.
Global Configuration Mode Commands
Command line request in global configuration mode appears as follows:
console(config)#
Table 5.63—Global configuration mode commands
Enable IPv6 RA guard function management for the switch.
Disable IPv6 RA guard function.
ipv6 nd raguard vlan
vlan
Enable IPv6 RA guard function management for the switch
within the specified VLAN.
- vlan – VLAN number.
Ethernet Interface Configuration Mode Commands
Command line request in the interface configuration mode appears as follows:
console (config-if)#
Table 5.64—Ethernet interface configuration mode commands
ipv6 nd raguard device-role
{ host | router }
Port operation mode selection.
- host – block all incoming RA messages;
- router – filter RA messages according to the configured rules.
ipv6 nd raguard match
access-list acl
Enable ACL for filtering RA messages in router mode.
- acl – ACL name.
ipv6 nd raguard match
prefix-list prefix-list
Enable prefix-list for filtering RA messages in router mode.
- prefix-list – prefix-list name.
ipv6 nd raguard trusted-
port
By default, all ports are
untrusted
Add port to the trusted list.
To Next Page
Loading...
Need help?
General
