Ipv6 Nd Raguard Hop-Limit - Cisco 300 Series Cli Manual

IPv6 First Hop Security
OL-32830-01 Command Line Interface Reference Guide
Default Configuration
The RA Guard default policy is applied.
Command Mode
Interface (VLAN) Configuration mode
User Guidelines
Use this command to attach an RA Guard policy to a VLAN.
If a policy specified by the policy-name argument is not defined, the command is
rejected.
Use the no form of the command to rdetach the current policy and toreattach the
default policy. The no form of the command has no effect if the default policy was
attached.
Example
In the following example, the RA Guard policy policy1 is attached to VLAN 100:
switchxxxxxx(config)#
switchxxxxxx(config-if)#
switchxxxxxx(config-if)#

25.33 ipv6 nd raguard hop-limit

To globally enable verification of the advertised Cur Hop Limit value in RA
messages, use the ipv6 nd raguard hop-limit command in Global Configuration
mode. To return to the default, use the no form of this command.
Syntax
ipv6 nd raguard hop-limit {[maximum
no ipv6 nd raguard hop-limit [maximum] [minimum]
Parameters
•
value
maximum
the value argument. Range 1-255. The value of the high boundary must be
equal to or greater than the value of the low boundary.
interface vlan 100
ipv6 nd raguard attach-policy policy1
exit
value
] [minimum
—Verifies that the hop-count limit is lower than or equal to
25
value
]}
528