Managed-Config-Flag - Cisco Nexus 7000 Series Command Reference Manual

managed-config-flag

managed-config-flag
To verify the advertised managed address configuration parameter, use the managed-config-flag command
in RA guard policy configuration mode.
managed-config-flag {on| off}
Syntax Description
on
off
Command Default
Verification is not enabled.
Command Modes
RA guard policy configuration (config-ra-guard)
Command History
Release
8.0(1)
Usage Guidelines
The managed-config-flag command enables verification of the advertised managed address configuration
parameter (or "M" flag). This flag could be set by an attacker to force hosts to obtain addresses through a
DHCPv6 server that may not be trustworthy.
Examples The following example shows how the command defines a router advertisement (RA) guard policy name as
raguard1, places the router in RA guard policy configuration mode, and enables M flag verification:
switch(config)# ipv6 nd raguard policy raguard1
switch(config-ra-guard)# managed-config-flag on
Related Commands
Command
ipv6 nd raguard policy
Cisco Nexus 7000 Series Security Command Reference
504
Verification is enabled.
Verification is disabled.
Modification
This command was introduced.
Description
Defines the RA guard policy name and enters RA
guard policy configuration mode.
M Commands