Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

vlans (RA Guard)

date_range 20-Nov-23

Syntax

content_copy zoom_out_map
vlans (vlan-name | all) {
    policy policy-name (stateful | stateless);
}

Hierarchy Level

content_copy zoom_out_map
[edit forwarding-options access-security router-advertisement-guard]

Description

Configure IPv6 Router Advertisement (RA) guard on a VLAN. In an IPv6 deployment, RA guard protects against rogue RA messages generated either maliciously or unintentionally by unauthorized or improperly configured routers connecting to the network segment. An RA guard policy is used to validate incoming RA messages on the basis of whether they match the conditions defined in a policy.

Before you can configure RA guard on a VLAN, you must first configure a policy at the [edit forwarding-options access-security router-advertisement-guard] hierarchy level. The policy is then applied to the VLAN at the [edit forwarding-options access-security router-advertisement-guard vlans vlan-name] hierarchy level.

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 15.1X53-D55.

footer-navigation