NOTE: IPv6 addresses are normally written as eight groups of four hexadecimal digits, whereeach group is separated by a colon (:). Omitting zeros is accepted as described in Addressing.Configuring IPv6 RA GuardThe IPv6 Router Advertisement (RA) guard allows you to block or reject the unwanted routeradvertisement guard messages that arrive at the network device platform.To configure the IPv6 RA guard, perform the following steps:1. Configure the terminal to enter the Global Configuration mode.EXEC Privilege modeconfigure terminal2. Enable the IPv6 RA guard.CONFIGURATION modeipv6 nd ra-guard enable3. Create the policy.POLICY LIST CONFIGURATION modeipv6 nd ra-guard policy policy-name4. Define the role of the device attached to the port.POLICY LIST CONFIGURATION modedevice-role {host | router}Use the keyword host to set the device role as host.Use the keyword router to set the device role as router.5. Set the hop count limit.POLICY LIST CONFIGURATION modehop-limit {maximum | minimum limit}The hop limit range is from 0 to 254.6. Set the managed address configuration flag.POLICY LIST CONFIGURATION modemanaged-config-flag {on | off}7. Enable verification of the sender IPv6 address in inspected messages from the authorized devicesource access list.POLICY LIST CONFIGURATION modematch ra{ipv6-access-list name | ipv6-prefix-list name | mac-access-listname}8. Enable verification of the advertised other configuration parameter.POLICY LIST CONFIGURATION modeother-config-flag {on | off}398 IPv6 Routing
