Users Guide

12. Configure the lifetime of the router.
OS10(conf-ra_guard_policy_list)# router-lifetime 100
13. Apply the policy to an interface.
OS10(config)# interface ethernet 1/1/6
OS10(conf-if-eth1/1/6)# ipv6 nd ra-guard attach-policy ra-guard-test-policy vlan 1
OS10# show ipv6 nd ra-guard ra-guard-test-policy
ipv6 nd ra-guard policy ra-guard-test-policy
device-role router
managed-config true
other-config true
mtu 1280
reachable time 100
retransmit-timer 100
router-life-time 100
router-preference maximum high
match ra ipv6-prefix-list example_prefix_list
Interfaces Vlans
----------------------------------
ethernet1/1/6 vlan1
IPv6 RA guard commands
clear ipv6 nd ra-guard statistics
Clears the RA packet statistics from all the interfaces that have RA guard policy configured.
Syntax
clear ipv6 nd ra-guard statistics [interface {ethernet node/slot/
port[:subport] | port-channel channel-id}]
Parameters
● ethernet node/slot/port[:subport]—Enter the Ethernet interface information.
● port-channel channel-id—Enter the port-channel ID, from 1 to 128.
Default None
Command Mode EXEC
Usage
Information
This command clears the RA packet statistics from all the interfaces that have RA guard policy
configured.
Example
OS10# clear ipv6 nd ra-guard statistics interface port-channel 10
Supported
Releases
10.5.2.0 or later
device-role
Configures the attached device as a host or a router.
Syntax
device-role {host | router}
Parameters
● host—Enter host to specify the connected device as a host.
● router—Enter router to specify the connected device as a router.
Default None
Command Mode RA GUARD POLICY LIST CONFIGURATION
Usage
Information
This command specifies whether the device attached to the interface is a host or a router. When an RA
packet arrives at the interface where this policy is configured:
● If you configure the device role as a host, OS10 drops all the RA packets.
904 Layer 3