SNR S2940-8G-v2, Configuration Manual

Page: 349 / 420

SNR S2940-8G-v2 Switch Configuration Guide
IPv6 Security RA Configuration
3. Display and debug the relative information of IPv6 security RA
Command Explanation
Admin Mode
debug ipv6 security-ra
no debug ipv6 security-ra Enable the debug information of IPv6 security RA mod-
ule, the no operation of this command will disable the
output of debug information of IPv6 security RA.
show ipv6 security-ra [ interface
<interface-list> ] Display the distrust port and whether globally security
RA is enabled.
52.3 IPv6 Security RA Typical Examples
PC user
Illegal user
E1/0/2
E1/0/3
E1/0/1
RA
RA
Figure 52.1: IPv6 Security RA sketch map
Instructions: if the illegal user in the graph advertises RA, the normal user will receive the RA,
set the default router as the vicious IPv6 host user and change its own address. This will cause
the normal user to not be able to connect the network. We want to set security RA on the 1/0/2
port of the switch, so that the RA from the illegal user will not affect the normal user.
Switch configuration task sequence:
Switch(config)#ipv6 security-ra enable
Switch(Config-If-Ethernet1/0/2)# ipv6 security-ra enable
52.4 IPv6 Security RA Troubleshooting Help
The function of IPv6 security RA is quite simple, if the function does not meet the expectation after
configuring IPv6 security RA:
• Check if the switch is correctly configured.
• Check if there are rules conflicting with security RA function configured on the switch, this
kind of rules will cause RA messages to be forwarded.
349