access-security
Syntax
access-security {
router-advertisement-guard {
interface interface-name {
mark-interface (trusted | block);
policy policy-name (stateful | stateless);
}
vlans (vlan-name | all) {
policy policy-name (stateful | stateless);
}
policy policy-name {
accept {
match-list {
match-criteria {
(match-all | match-any);
}
prefix-list-name prefix-list-name;
source-ip-address-list address-list-name;
source-mac-address-list address-list-name;
}
match-option {
hop-limit {
(maximum | minimum) value;
}
managed-config-flag;
other-config-flag;
router-preference (high | low | medium);
}
}
discard {
prefix-list-name prefix-list-name;
source-ip-address-list address-list-name;
source-mac-address-list address-list-name;
}
}
}
slaac-snooping {
interface (interface-name | all) {
auto-dad {
retries retries;
retrans-interval seconds;
}
mark-interface {
trusted;
}
max-allowed-contentions count {
duration seconds;
}
}
link-local {
expiry interval seconds;
}
vlans (vlan-name | all);
}
}
Hierarchy Level
[edit forwarding-options]
Description
Configure IPv6 access security options.
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 15.1X53-D55.