Table of Contents
Advertisement
Chapter 30
| IP Interface Commands
IPv6 Interface
ipv6 nd raguard
ND DAD is enabled, number of DAD attempts: 5.
ND retransmit interval is 30000 milliseconds
ND advertised retransmit interval is 30000 milliseconds
ND reachable time is 30000 milliseconds
ND advertised reachable time is 0 milliseconds
ND advertised router lifetime is 1800 seconds
Console#
Related Commands
show running-config (110)
This command blocks incoming Router Advertisement and Router Redirect
packets. Use the no form to disable this feature.
Syntax
[no] ipv6 nd raguard
Default Setting
Disabled
Command Mode
Interface Configuration (Ethernet, Port Channel)
Command Usage
◆
IPv6 Router Advertisements (RA) convey information that enables nodes to
auto-configure on the network. This information may include the default router
address taken from the observed source address of the RA message, as well as
on-link prefix information. However, unintended mis-configurations, or
possibly malicious attacks on the network, may lead to bogus RAs being sent,
which in turn can cause operational problems for hosts on the network.
◆
This command can be used to block RAs and Router Redirect (RR) messages on
the specified interface. Determine which interfaces are connected to known
routers, and enable RA Guard on all other untrusted interfaces.
Example
Console(config)#interface ethernet 1/1
Console(config-if)#pv6 nd raguard
Console(config-if)#
– 884 –
Hide quick links:
Advertisement
Table of Contents
