The ability to suppress VRRPv3 master device interface router advertisements is introduced.
About this task
Suppressing interface router advertisements from the master VRRPv3 device may be performed for network security concerns because the RA messages include the MAC addresses of interfaces. In this task, VRRP-Ev3 is configured globally and RA messages are suppressed for the virtual ethernet (VE) 2109 interface.
Note
To configure this task for VRRPv3, use the
ipv6 protocol vrrp command.
Procedure
-
Enter the
configure terminal command to access global configuration mode.
device# configure terminal
-
Globally enable VRRP-Ev3.
device(config)# ipv6 protocol vrrp-extended
-
Enter the
interface ve
command with an associated VLAN number.
device(config)# interface ve 2019
In this example, virtual Ethernet (ve) configuration mode is entered and the interface is assigned with a VLAN number of 2019.
-
Enter the
ipv6 vrrp-suppress-interface-ra
command to suppress interface RA messages for the ve 2019 interface.
device(config-ve-2019)# ipv6 vrrp-suppress-interface-ra
Example
The following example shows how to disable VRRPv3 RA messages from interface configuration mode for a VRRP-Ev3 session.
device# configure
device(config)# ipv6 protocol vrrp-extended
device(config)# interface ve 2019
device(config-ve-2019)# ipv6 vrrp-suppress-interface-ra
