Suppressing interface router advertisements from the master VRRPv3 device may be performed for network security concerns because the RA messages include the MAC addresses of interfaces. In this task, VRRP-Ev3 is configured globally and RA messages are suppressed for the virtual ethernet (VE) 2109 interface.
Note
To configure this task for VRRPv3, use the
ipv6 protocol vrrp command.
-
Enter the
configure terminal command to access global configuration mode.
device# configure terminal
-
Globally enable VRRP-Ev3.
device(config)# ipv6 protocol vrrp-extended
-
Enter the
interface ve
command with an associated VLAN number.
device(config)# interface ve 2019
In this example, virtual Ethernet (ve) configuration mode is entered and the interface is assigned with a VLAN number of 2019.
-
Enter the
ipv6 vrrp-suppress-interface-ra
command to suppress interface RA messages for the ve 2019 interface.
device(config-ve-2019)# ipv6 vrrp-suppress-interface-ra
The following example shows how to disable VRRPv3 RA messages from interface configuration mode for a VRRP-Ev3 session.
device# configure
device(config)# ipv6 protocol vrrp-extended
device(config)# interface ve 2019
device(config-ve-2019)# ipv6 vrrp-suppress-interface-ra
