How do I go about blocking IPv6 RA advertisements on access ports on a Juniper EX series switch? I know that Cisco offers ra-guard as an option much like bpdu-guard on spanning tree, I am just not sure how to accomplish the same thing in Junos.
9
-
Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin♦ Aug 8 '17 at 9:41
4
The support for this feature looks a bit spotty depending on which version of Junos you're running. You could try this:
term block-ra {
from {
icmp-type router-advertisement;
}
then {
discard;
}
}
-
2Sorry for the nitpicking, but I think this would also block IPv4 Router Advertisements (ICMPv4 type 9). Adding 'from next-header icmpv6' would make the term match only IPv6 RAs as asked. – Gerben Jun 5 '13 at 20:01
