Advertised IPv6 Prefix-based Filtering

Advertised IPv6 prefix-based filtering enables verification of the advertised prefixes in inspected messages against the configured RA prefix list.

The following figure illustrates the IPv6 ICMP RA data packet outline. This RA Guard policy verifies the RA (Prefix Information) in ICMPv6 data against the configured RA prefix list.

Click to expand in new window
IPv6 ICMP RA Data Packet Outline