ExtremeSwitching (EOS)

Expand all | Collapse all

IPv6 RA Guard Support for EOS or EXOS?

  • 1.  IPv6 RA Guard Support for EOS or EXOS?

    Posted 06-13-2017 06:21
    Hi,

    does EOS and/or EXOS support an RA Guard feature?

    I did not find something like it in the documentation or on GTAC Knowledge, only an old thread on this forum (How to setup RA Guard?) where a manual way to build an ACL to filter RA message is described. I suppose something similar can be done on EOS as well. Is there no simpler way?

    Thanks,
    Erik


  • 2.  RE: IPv6 RA Guard Support for EOS or EXOS?

    Posted 06-13-2017 13:00
    Hi Larry,

    thanks for the link.

    Sadly, this is just describing a manual ACL solution as described in RFC 7113. This needs to be integrated manually into other filtering requirements for access control or even policy based routing in the case of EXOS.

    A separate feature that can just be turned on is much simpler to use. E.g., it is easier to activate DHCP snooping in a network than implementing (a subset of) that functionality via OnePolicy.

    Thanks,
    Erik


  • 3.  RE: IPv6 RA Guard Support for EOS or EXOS?

    Posted 06-13-2017 13:55
    EOS does not support RA Guard either which means a manual ACL is required.


  • 4.  RE: IPv6 RA Guard Support for EOS or EXOS?

    Posted 06-13-2017 12:34
    Hi, Erik. The following topic in the EXOS User Guide might be what you're looking for: IPv6 Router Advertisement Filtering

    Hope this helps.

    Larry Kunz
    Information Development
    Extreme Networks