Configure RA Guard on an Interface

About this task

Attaches or detaches a RA Guard policy on the specific interface.

Procedure

  1. Enter GigabitEthernet Interface Configuration mode:

    enable

    configure terminal

    interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-port]][,...]}

    Note

    Note

    If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.

  2. Apply a RA Guard policy.
    ipv6 fhs ra-guard attach-policy WORD<1–64>
    Note

    Note

    RA Guard device-role on the port has to be configured as 'router' before attaching any RA Guard policy to the port. If device-role on the port is not 'router', this command will fail with an appropriate error message.

  3. Detach a RA Guard policy from an interface.

    no ipv6 fhs ra-guard attach-policy

    OR

    default ipv6 fhs ra-guard attach-policy

  4. Enable device role verification attached to the port.
    ipv6 fhs ra-guard device-role {router|host} attach-policy WORD<1-64>
    Note

    Note

    A DHCPv6 Guard policy can be attached to a port only if the device-role configured on that port is 'server'.

Variable Definitions

The following table defines parameters for the ipv6 fhs ra-guard attach-policy and ipv6 fhs ra-guard device-role command.

Variable

Description

WORD<1–64>

Specifies the name of the RA Guard policy to be attached or detached.

{host | router}

Sets the RA Guard device role as host or router.
9037147-00 Rev AB