Disabling VRRPv3 router advertisements

The ability to suppress VRRPv3 master device interface router advertisements is introduced.

About this task

Suppressing interface router advertisements from the master VRRPv3 device may be performed for network security concerns because the RA messages include the MAC addresses of interfaces. In this task, VRRP-Ev3 is configured globally and RA messages are suppressed for the virtual ethernet (VE) 2109 interface.
Note

Note

To configure this task for VRRPv3, use the ipv6 protocol vrrp command.

Procedure

  1. Enter the configure terminal command to access global configuration mode.
    device# configure terminal
  2. Globally enable VRRP-Ev3.
    device(config)# ipv6 protocol vrrp-extended
  3. Enter the interface ve command with an associated VLAN number.
    device(config)# interface ve 2019
    In this example, virtual Ethernet (ve) configuration mode is entered and the interface is assigned with a VLAN number of 2019.
  4. Enter the ipv6 vrrp-suppress-interface-ra command to suppress interface RA messages for the ve 2019 interface.
    device(config-ve-2019)# ipv6 vrrp-suppress-interface-ra

Example

The following example shows how to disable VRRPv3 RA messages from interface configuration mode for a VRRP-Ev3 session.

device# configure
device(config)# ipv6 protocol vrrp-extended
device(config)# interface ve 2019
device(config-ve-2019)# ipv6 vrrp-suppress-interface-ra