IPv6 First Hop Security
535
OL-32830-01 Command Line Interface Reference Guide
25
Command Mode
Global Configuration mode
User Guidelines
This command enables verification of the advertised Default Router Preference
value in RA messages (see RFC4191).
Configuring the minimum
value
keyword and argument specifies the minimum
allowed value. Received RA messages with a Default Router Preference value less
than the
value
argument are dropped.
Configuring the maximum
value
keyword and argument specifies the maximum
allowed value. Received RA messages with a Default Router Preference value
greater than the
value
argument are dropped.
Use the no ipv6 nd raguard router-preference command to disable verification of
the advertised Default Router Preference value in RA messages.
Use the no ipv6 nd raguard router-preference maximum command to disable
verification of the maximum boundary of the advertised Default Router Preference
value in RA messages.
Use the no ipv6 nd raguard router-preference minimum command to disable
verification of the advertised Default Router Preference value in RA messages.
Examples
Example 1—The following example defines that only a value of medium is
acceptable using two commands:
switchxxxxxx(config)#
ipv6 nd raguard router-preference minimum medium
switchxxxxxx(config)#
ipv6 nd raguard router-preference maximum medium
Example 2—The following example defines that only a value of medium is
acceptable using a single command:
switchxxxxxx(config)#
ipv6 nd raguard router-preference minimum medium
maximum medium
Summary of Contents for 300 Series
Page 2: ......
