9

How do I go about blocking IPv6 RA advertisements on access ports on a Juniper EX series switch? I know that Cisco offers ra-guard as an option much like bpdu-guard on spanning tree, I am just not sure how to accomplish the same thing in Junos.

  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Aug 8 '17 at 9:41
4

The support for this feature looks a bit spotty depending on which version of Junos you're running. You could try this:

term block-ra {
    from {
        icmp-type router-advertisement;
    }
    then {
        discard;
    }
}
  • 2
    Sorry for the nitpicking, but I think this would also block IPv4 Router Advertisements (ICMPv4 type 9). Adding 'from next-header icmpv6' would make the term match only IPv6 RAs as asked. – Gerben Jun 5 '13 at 20:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.