SNR S2989G-8TX — iPv6 Security RA Configuration and Troubleshooting Guide [546/553]

Превью страниц Страница 546 / 553

S2989G-24TX Operation Manual

Chapter 11 IPv6 Configuration

11-36

3. Display and debug the relative information of IPv6 security RA

Command

Explanation

Admin Mode

debug ipv6 security-ra

no debug ipv6 security-ra

Enable the debug information of IPv6

security RA module, the no operation of

this command will disable the output of

debug information of IPv6 security RA.

show ipv6 security-ra [interface

<interface-list>]

Display the distrust port and whether

globally security RA is enabled.

11.6.3

IPv6 Security RA Typical Examples

用户

Figure 11-8 IPv6 Security RA sketch map

Instructions: if the illegal user in the graph advertises RA, the normal user will receive

the RA, set the default router as the vicious IPv6 host user and change its own address.

This will cause the normal user to not be able to connect the network. We want to set

security RA on the 1/0/2 port of the switch, so that the RA from the illegal user will not

affect the normal user.

Switch configuration task sequence:

Switch#config

Switch(config)#ipv6 security-ra enable

Switch(Config-If-Ethernet1/0/2)# ipv6 security-ra enable

11.6.4

IPv6 Security RA Troubleshooting Help

其它 IPv6 网络

Ethernet1/0/1

Ethernet1/0/3

Ethernet1/0/2

PC 用户

非法