Blocking IPv6 RA advertisements on Juniper EX series switch

ipv6juniperjuniper-junosSecurity

How do I go about blocking IPv6 RA advertisements on access ports on a Juniper EX series switch? I know that Cisco offers ra-guard as an option much like bpdu-guard on spanning tree, I am just not sure how to accomplish the same thing in Junos.

Best Answer

The support for this feature looks a bit spotty depending on which version of Junos you're running. You could try this:

term block-ra {
    from {
        icmp-type router-advertisement;
    }
    then {
        discard;
    }
}
Related Topic