Ipv6 Nd Raguard - Edge-Core AS6700-32X Cli Reference Manual

Chapter 27
| IP Interface Commands
IPv6 Interface

ipv6 nd raguard

Global unicast address(es):
2001:db8:0:1:2e0:cff:fe02:fd/64, subnet is 2001:db8:0:1::/64[EUI]
2001:db8:2222:7272::72/96, subnet is 2001:db8:2222:7272::/96
Joined group address(es):
ff02::2
ff02::1:ff19:6779
ff02::1:ff00:0
ff02::1:ff00:72
ff02::1:ff02:fd
ff02::1:2
ff02::1
IPv6 link MTU is 1500 bytes
ND DAD is enabled, number of DAD attempts: 5.
ND retransmit interval is 30000 milliseconds
ND advertised retransmit interval is 30000 milliseconds
ND reachable time is 30000 milliseconds
ND advertised reachable time is 0 milliseconds
ND advertised router lifetime is 1800 seconds
Console#
Related Commands
show running-config (118)
This command blocks incoming Router Advertisement and Router Redirect
packets. Use the no form to disable this feature.
Syntax
[no] ipv6 nd raguard
Default Setting
Disabled
Command Mode
Interface Configuration (Ethernet, Port Channel)
Command Usage
◆
IPv6 Router Advertisements (RA) convey information that enables nodes to
auto-configure on the network. This information may include the default router
address taken from the observed source address of the RA message, as well as
on-link prefix information. However, unintended mis-configurations, or
possibly malicious attacks on the network, may lead to bogus RAs being sent,
which in turn can cause operational problems for hosts on the network.
◆
This command can be used to block RAs and Router Redirect (RR) messages on
the specified interface. Determine which interfaces are connected to known
routers, and enable RA Guard on all other untrusted interfaces.
– 776 –