topic RE: IPv6 RA Guard Support for EOS or EXOS? in ExtremeSwitching (EOS)

IPv6 RA Guard Support for EOS or EXOS?

Erik_Auerswald — Tue, 13 Jun 2017 13:21:00 GMT

Hi,

does EOS and/or EXOS support an RA Guard feature?

I did not find something like it in the documentation or on GTAC Knowledge, only an old thread on this forum (How to setup RA Guard?) where a manual way to build an ACL to filter RA message is described. I suppose something similar can be done on EOS as well. Is there no simpler way?

Thanks,
Erik

RE: IPv6 RA Guard Support for EOS or EXOS?

Larry_Kunz — Tue, 13 Jun 2017 19:34:00 GMT

Hi, Erik. The following topic in the EXOS User Guide might be what you're looking for: IPv6 Router Advertisement Filtering

Hope this helps.

Larry Kunz
Information Development
Extreme Networks

RE: IPv6 RA Guard Support for EOS or EXOS?

Erik_Auerswald — Tue, 13 Jun 2017 20:00:00 GMT

Hi Larry,

thanks for the link.

Sadly, this is just describing a manual ACL solution as described in RFC 7113. This needs to be integrated manually into other filtering requirements for access control or even policy based routing in the case of EXOS.

A separate feature that can just be turned on is much simpler to use. E.g., it is easier to activate DHCP snooping in a network than implementing (a subset of) that functionality via OnePolicy.

Thanks,
Erik

RE: IPv6 RA Guard Support for EOS or EXOS?

Luke_French — Tue, 13 Jun 2017 20:55:00 GMT

EOS does not support RA Guard either which means a manual ACL is required.