Edge-Core AS5700-54X, Справочное руководство CLI, Страница: 776 / 1116

Chapter 27
| IP Interface Commands
IPv6 Interface
– 776 –
Global unicast address(es):
2001:db8:0:1:2e0:cff:fe02:fd/64, subnet is 2001:db8:0:1::/64[EUI]
2001:db8:2222:7272::72/96, subnet is 2001:db8:2222:7272::/96
Joined group address(es):
ff02::2
ff02::1:ff19:6779
ff02::1:ff00:0
ff02::1:ff00:72
ff02::1:ff02:fd
ff02::1:2
ff02::1
IPv6 link MTU is 1500 bytes
ND DAD is enabled, number of DAD attempts: 5.
ND retransmit interval is 30000 milliseconds
ND advertised retransmit interval is 30000 milliseconds
ND reachable time is 30000 milliseconds
ND advertised reachable time is 0 milliseconds
ND advertised router lifetime is 1800 seconds
Console#
Related Commands
show running-config (118)
ipv6 nd raguard
This command blocks incoming Router Advertisement and Router Redirect
packets. Use the no form to disable this feature.
Syntax
[ no ] ipv6 nd raguard
Default Setting
Disabled
Command Mode
Interface Configuration (Ethernet, Port Channel)
Command Usage
◆
IPv6 Router Advertisements (RA) convey information that enables nodes to
auto-configure on the network. This information may include the default router
address taken from the observed source address of the RA message, as well as
on-link prefix information. However, unintended mis-configurations, or
possibly malicious attacks on the network, may lead to bogus RAs being sent,
which in turn can cause operational problems for hosts on the network.
◆
This command can be used to block RAs and Router Redirect (RR) messages on
the specified interface. Determine which interfaces are connected to known
routers, and enable RA Guard on all other untrusted interfaces.