Other-Config-Flag - Cisco Nexus 7000 Series Command Reference Manual

O Commands

other-config-flag

To verify the advertised "other" configuration parameter, use the other-config-flag command in RA guard
policy configuration mode.
other-config-flag {on| off}
Syntax Description
on
off
Command Default
Verification is not enabled.
Command Modes
RA guard policy configuration (config-ra-guard)
Command History
Release
8.0(1)
Usage Guidelines
The other-config-flag command enables verification of the advertised "other" configuration parameter (or
"O" flag). This flag could be set by an attacker to force hosts to retrieve other configuration information
through a Dynamic Host Configuration Protocol for IPv6 (DHCPv6) server that may not be trustworthy.
Examples The following example shows how the command defines a router advertisement (RA) guard policy name as
raguard1, places the router in RA guard policy configuration mode, and enables O flag verification:
switch(config)# ipv6 nd raguard policy raguard1
switch(config-ra-guard)# other-config-flag on
Related Commands
Command
ipv6 nd raguard policy
Verification is enabled.
Verification is disabled.
Modification
This command was introduced.
Description
Defines the RA guard policy name and enters RA
guard policy configuration mode.
Cisco Nexus 7000 Series Security Command Reference
other-config-flag
525