Allied Telesis x510-28GPX, Справочник по командам

Страница: 857 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 857
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
IP
V
6 C
OMMANDS
IPV
6
ND RAGUARD
ipv6 nd raguard
Overview Use this command to apply the Router Advertisements (RA) Guard feature from the
Interface Configuration mode for a device port. This blocks all RA messages
received on a device port.
For more information about RA Guard, see the IPv6 Feature Overview and
Configuration Guide .
Use the no parameter with this command to disable RA Guard for a specified
device port.
Syntax
ipv6 nd raguard
no ipv6 nd raguard
Default RA Guard is not enabled by default.
Mode Interface Configuration for a device port interface.
Usage Router Advertisements (RAs) are used by Routers to announce themselves on the
link. Applying RA Guard to a device port disallows Router Advertisements and
redirect messages. RA Guard blocks RAs from untrusted hosts. Blocking RAs stops
untrusted hosts from flooding malicious RAs and stops any misconfigured hosts
from disrupting traffic on the local network.
Enabling RA Guard on a port blocks RAs from a connected host and indicates the
port and host are untrusted. Disabling RA Guard on a port allows RAs from a
connected host and indicates the port and host are trusted. Ports and hosts are
trusted by default to allow RAs.
Example To enable RA Guard on device ports
port1.0.2-1.0.12
, use the following
commands:
awplus# configure terminal
awplus(config)# interface port1.0.2-1.0.12
awplus(config-if)# ipv6 nd raguard
To verify RA Guard is enabled on device port interface
port1.0.2
, use the
command:
awplus# show running-config interface port1.0.2
To disable RA Guard on device ports
port1.0.2-1.0.12
, use the following
commands:
awplus# configure terminal
awplus(config)# interface port1.0.2-port1.0.12
awplus(config-if)# no ipv6 nd raguard
When RA Guard is disabled on a device port it is not displayed in show
running-config output.