Configuring Ipv6 Ra Guard - Cisco Nexus 9000 Series Configuration Manual

Configuring DHCP
Command or Action
switch(config)# ipv6 dhcp relay source-interface
loopback 2
Step 3 (Optional) show ipv6 dhcp relay [interface interface]
Example:
switch(config)# show ipv6 dhcp relay
Step 4 (Optional) show running-config dhcp show
running-config dhcp
Example:
switch(config)# show running-config dhcp
Step 5
(Optional) copy running-config startup-config
Example:
switch(config)# copy running-config startup-config

Configuring IPv6 RA Guard

You can configure the IPv6 router advertisement (RA) guard feature for Cisco Nexus 9200, 9300, and 9300-EX
Series switches and the N9K-X9732C-EX line card. This feature is used to drop all incoming IPv6 RA packets
on a Layer 2 interface.
Before you begin
You must enable DHCP (using the feature dhcp command).
To enable DHCP relay on any interface, you must disable DHCP on interfaces that have an IPv4 or IPv6
address assigned using DHCP (dynamic IP addressing).
Make sure that both PTP (feature ptp) and NV overlay (feature nv overlay) are not already configured. A
dynamic ifacl label is reserved when these features are configured. However, only two dynamic ifacl label
bits are available. If both of these features are already configured, a dynamic ifacl label will not be available
for IPv6 RA guard, and the feature cannot be enabled.
SUMMARY STEPS
1. configure terminal
2. interface interface slot/port
3. [no] ipv6 nd raguard
4. (Optional) copy running-config startup-config
Purpose
The DHCPv6 relay source interface can be
Note
configured globally, per interface, or both. When
both the global and interface levels are
configured, the interface-level configuration
overrides the global configuration.
Displays the DHCPv6 relay configuration.
Displays the DHCP configuration.
Copies the running configuration to the startup
configuration.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Configuring IPv6 RA Guard
361