Administrator Guide

Example
DellEMC# show ipv6 neighbors
IPv6 Address Expires(min) Hardware Address State Interface VLAN CPU
---------------------------------------------------------------------
100::1 0.03 00:00:00:00:00:22 DELAY Gi 1/12 - CP
fe80::200:ff:fe00:22 232 00:00:00:00:00:22 STALE Gi 1/12 - CP
500::1 0.60 00:01:e8:17:5c:af REACH Gi 1/13 - CP
fe80::200:ff:fe00:17 232 00:00:00:00:00:29 REACH Gi 1/14 - CP
900::1 0.60 00:01:e8:17:5c:b1 STALE Po 23 - CP
400::1 0.60 00:01:e8:17:5c:ae REACH Gi 1/2 Vl 100 CP
DellEMC#
IPv6 Router Advertisement (RA) Guard
The IPv6 RA guard provides support to perform conditional forwarding or blocking of the router advertisement messages that
are received at the network device platform. This functionality analyzes and filters the RAs sent by the devices and compares
the configuration information on the layer 2 device with the RA frame. Once the layer 2 device validates the content of the RA
frame against the configuration, it forwards the RA to its unicast or multicast destination. On failure to validate the RA frame
content, the RA frame is dropped.
The IPv6 RA guard supports two different modes:
● Host mode — When a policy with device role as host is applied on an interface, all the RA packets are dropped without
validation. You can also configure the host mode policy with VLAN option to drop the RA packets on that specific VLAN and
port.
● Router mode — When a policy with device role as router is applied on an interface, all the RA packets are validated based on
the configuration information in the policy. Similarly, you can also apply this mode over any specific VLAN and the validation
is performed only for that particular VLAN RA packets.
To configure the IPv6 RA guard, use the following Dell EMC Networking OS commands.
debug ipv6 nd ra–guard
Enable debugging for IPv6 RA guard snooping information.
Syntax
debug ipv6 nd ra-guard [interface_type slot/port | count value]
Parameters
interface_type
slot/port
Enter the one of the following interfaces and slot/port information:
● For a port channel interface, enter the keywords port-channel then a
number.
● For a 1-GigabitEthernet interface, enter the keyword GigabitEthernet then
the slot/port information.
● For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet then the slot/port information.
count value Enter the keyword count then the number of debug outputs. The range is from 1
to 65534. The default is infinity.
Defaults None
Command Modes EXEC Privilege
Command
History
This guide is platform-specific. For command information about other platforms, see the relevant Dell
EMC Networking OS Command Line Reference Guide.
Version Description
9.11(0.0) Introduced on the C9010.
9.10(0.1) Introduced on the S6010-ON and S4048T-ON.
9.10(0.0) Introduced on the S3148.
9.10(0.0) Introduced on the S6100-ON.
1006 Neighbor Discovery Protocol (NDP)