Example: Verifying the RA Guard Configuration
To view the RA guard packet counts, use the
show ipv6 raguard counts command.
device# show ipv6 raguard counts policyB DROPPED-host port:0 DROPPED-whitelist:3 DROPPED-prefixlist:1 DROPPED-max pref:1 DROPPED-trusted port:2 DROPPED-untrusted port:1
To verify the RA guard policy configuration, enter the
show ipv6 raguard policy all command.
device# show ipv6 raguard policy all policy:policyC whitelist:0 max_pref:medium policy:policyB whitelist:1
To verify the configuration of RA guard whitelists, enter the
show ipv6 raguard whitelist all command.
device# show ipv6 raguard whitelist all
whitelist #1 : 3 entries
permit fe80:db8::db8:10/128
permit fe80:db8::db8:5/128
permit fe80:db8::db8:12/128
To verify the RA guard configuration for a specific VLAN, enter the
show ipv6 raguard vlan command followed by the ID of VLAN you want to check.
The following example displays output for a VLAN.
device# show ipv6 raguard vlan 320 VLAN Policy ----- ------ 320 policy650
To check IPv6 RA guard in the running configuration, enter the show
running-config command. The following example displays all
IPv6 RA Guard whitelists and policies configured on the ICX device and
verifies that two VLANs (VLAN 100 and VLAN 200) have IPv6 RA Guard policies
bound to them.
device(config)# show running-config Current configuration: ! ver 09.0.00 ! stack unit 1 module 1 icx7650-48zp-port-management-module module 2 icx7600-qsfp-2port-80g-module module 3 icx7650-100g-2port-200g-module stack-port ethernet 1/3/1 stack-port ethernet 1/3/2 stack mac 609c.9f52.29ae ! hitless-failover enable ! ! ipv6 raguard whitelist 10 permit 1122:3344::5566:3344/64 ipv6 raguard whitelist 10 permit 1133:3344::5566:3344/96 ipv6 raguard whitelist 10 permit 1144:3344::5566:3344 ipv6 raguard whitelist 10 permit 1222:3344::5566:3344/64 ipv6 raguard whitelist 10 permit 1233:3344::5566:3344/96 ipv6 raguard whitelist 10 permit 1244:3344::5566:3344 ipv6 raguard whitelist 10 permit 1322:3344::5566:3344/64 ipv6 raguard whitelist 10 permit 1333:3344::5566:3344/96 ! ipv6 raguard whitelist 20 permit 1122:3344::5566:3344/64 ipv6 raguard whitelist 20 permit 1133:3344::5566:3344/96 ipv6 raguard whitelist 20 permit 1144:3344::5566:3344 ipv6 raguard whitelist 20 permit 1222:3344::5566:3344/64 ipv6 raguard whitelist 20 permit 1233:3344::5566:3344/96 ! ipv6 raguard whitelist 22 permit 1122:3344::5566:3344/64 ipv6 raguard whitelist 22 permit 1133:3344::5566:3344/96 ipv6 raguard whitelist 22 permit 1144:3344::5566:3344 ipv6 raguard whitelist 22 permit 1222:3344::5566:3344/64 ipv6 raguard whitelist 22 permit 1233:3344::5566:3344/96 ipv6 raguard whitelist 22 permit 1244:3344::5566:3344 ! ipv6 raguard whitelist 31 permit 1122:3344::5566:3344/64 ipv6 raguard whitelist 31 permit 1133:3344::5566:3344/96 ipv6 raguard whitelist 31 permit 1144:3344::5566:3344 ipv6 raguard whitelist 31 permit 1222:3344::5566:3344/64 ipv6 raguard whitelist 31 permit 1233:3344::5566:3344/96 ipv6 raguard whitelist 31 permit 1244:3344::5566:3344 ipv6 raguard whitelist 31 permit 1322:3344::5566:3344/64 ! ipv6 raguard whitelist 42 permit 1122:3344::5566:3344/64 ipv6 raguard whitelist 42 permit 1133:3344::5566:3344/96 ipv6 raguard whitelist 42 permit 1144:3344::5566:3344 ipv6 raguard whitelist 42 permit 1222:3344::5566:3344/64 ipv6 raguard whitelist 42 permit 1233:3344::5566:3344/96 ipv6 raguard whitelist 42 permit 1244:3344::5566:3344 ipv6 raguard whitelist 42 permit 1322:3344::5566:3344/64 ipv6 raguard whitelist 42 permit 1333:3344::5566:3344/96 ! ipv6 raguard whitelist 48 permit 1122:3344::5566:3344/64 ipv6 raguard whitelist 48 permit 1133:3344::5566:3344/96 ipv6 raguard whitelist 48 permit 1144:3344::5566:3344 ipv6 raguard whitelist 48 permit 1222:3344::5566:3344/64 ipv6 raguard whitelist 48 permit 1233:3344::5566:3344/96 ipv6 raguard whitelist 48 permit 1244:3344::5566:3344 ipv6 raguard whitelist 48 permit 1322:3344::5566:3344/64 ipv6 raguard whitelist 48 permit 1333:3344::5566:3344/96 ! ipv6 raguard whitelist 63 permit 1122:3344::5566:3344/64 ipv6 raguard whitelist 63 permit 1133:3344::5566:3344/96 ipv6 raguard whitelist 63 permit 1144:3344::5566:3344 ipv6 raguard whitelist 63 permit 1222:3344::5566:3344/64 ipv6 raguard whitelist 63 permit 1233:3344::5566:3344/96 ipv6 raguard whitelist 63 permit 1244:3344::5566:3344 ipv6 raguard whitelist 63 permit 1322:3344::5566:3344/64 ipv6 raguard whitelist 63 permit 1333:3344::5566:3344/96 ! ! ipv6 raguard policy pol20 whitelist 10 prefix-list prefix1 maximum-preference medium logging ! ipv6 raguard policy pol28 whitelist 22 prefix-list prefix28 maximum-preference medium logging ! ipv6 raguard policy pol31 whitelist 31 prefix-list prefix2 maximum-preference low logging ! ipv6 raguard policy pol63 whitelist 63 logging ! ipv6 raguard policy pol2 whitelist 20 prefix-list prefix20 maximum-preference medium ! ipv6 raguard policy pol40 prefix-list prefix40 maximum-preference low logging ! ipv6 raguard policy pol37 whitelist 42 prefix-list prefix1 maximum-preference medium logging ! ipv6 raguard policy pol56 whitelist 48 prefix-list prefix1 logging ! ipv6 raguard policy pol18 whitelist 20 prefix-list prefix18 maximum-preference low logging ! ipv6 raguard policy pol58 logging ! ipv6 raguard policy pol39 whitelist 22 prefix-list prefix39 maximum-preference medium logging ! ! ipv6 raguard vlan 100 policy pol20 ipv6 raguard vlan 200 policy pol28 ! ! !