How To Attach An Ipv6 Router Advertisement Guard Policy To An Interface - Cisco Catalyst 2960 series Configuration Manual

Command or Action
Step 8 [no]router-preference maximum {high |
medium | low}
Example:
Switch(config-nd-raguard)#
router-preference maximum high
Step 9 [no]trusted-port
Example:
Switch(config-nd-raguard)# trusted-port
Step 10
default {device-role | hop-limit {maximum |
minimum} | managed-config-flag | match {ipv6
access-list | ra prefix-list } | other-config-flag |
router-preference maximum| trusted-port}
Example:
Switch(config-nd-raguard)# default
hop-limit
Step 11
do show ipv6 nd raguard policy policy_name
Example:
Switch(config-nd-raguard)# do show ipv6
nd raguard policy example_policy
Related Topics
Information about First Hop Security in IPv6, on page 678

How to Attach an IPv6 Router Advertisement Guard Policy to an Interface

Beginning in privileged EXEC mode, follow these steps to attach an IPv6 Router Advertisement policy to an
interface or to VLANs on the interface :
Purpose
Enables filtering of Router Advertisement messages by the Router
Preference flag. If not configured, this filter is disabled.
• high—Accepts RA messages with the Router Preference set to
• medium—Blocks RA messages with the Router Preference set
• low—Blocks RA messages with the Router Preference set to
When configured as a trusted port, all attached devices are trusted,
and no further message verification is performed.
Restores a command to its default value.
(Optional)—Displays the ND Guard Policy configuration without
exiting the RA Guard policy configuration mode.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
How to Configure an IPv6 Router Advertisement Guard Policy
high, medium, or low.
to high.
medium and high.
697