Ipv6 Nd Raguard - Allied Telesis IE340 Series Command Reference Manual

IP 6 C
V OMMANDS
6
IPV ND RAGUARD

ipv6 nd raguard

Overview Use this command to apply the Router Advertisements (RA) Guard feature from the
Interface Configuration mode for a device port. This blocks all RA messages
received on a device port.
For more information about RA Guard, see the
Configuration
Use the no parameter with this command to disable RA Guard for a specified
device port.
ipv6 nd raguard
Syntax
no ipv6 nd raguard
Default RA Guard is not disabled by default.
Mode Interface Configuration for a port.
Usage notes Router Advertisements (RAs) are used by Routers to announce themselves on the
link. Applying RA Guard to a device port disallows Router Advertisements and
redirect messages. RA Guard blocks RAs from untrusted hosts. Blocking RAs stops
untrusted hosts from flooding malicious RAs and stops any misconfigured hosts
from disrupting traffic on the local network.
Enabling RA Guard on a port blocks RAs from a connected host and indicates the
port and host are untrusted. Disabling RA Guard on a port allows RAs from a
connected host and indicates the port and host are trusted. Ports and hosts are
trusted by default to allow RAs.
Example To enable RA Guard on port1.0.1-port1.0.4, use the following commands:
awplus#
awplus(config)#
awplus(config-if)#
To verify RA Guard is enabled on port1.0.1, use the command:
awplus#
To disable RA Guard on port1.0.1-port1.0.4, use the following commands:
awplus#
awplus(config)#
awplus(config-if)#
When RA Guard is disabled on a port it is not displayed in show running-config
output.
Output Example output from using show running-config interface port1.0.1 to verify RA
Guard:
C613-50631-01 Rev A
Guide.
configure terminal
interface port1.0.1-port1.0.4
ipv6 nd raguard
show running-config interface port1.0.1
configure terminal
interface port1.0.1-port1.0.4
no ipv6 nd raguard
Command Reference for IE340 Series
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
IPv6 Feature Overview and
978