`nd-snooping ra-drop`

Syntax

nd-snooping ra-drop

no nd-snooping ra-drop

Description

This command enables Routing Advertisement (RA) drop on the selected VLAN. When enabled, ingress RA packets on the selected VLAN are blocked on both trusted and untrusted ports. When disabled, RA packets are forwarded on the selected VLAN with ND snooping trusted port validation. RA drop is disabled by default.

NOTE:

ND snooping must be enabled in both the config context and the config-vlan context before this command can be used.

The no form of the command disables ND snooping RA drop on the selected VLAN.

Command context

config-vlan

Authority

Administrators or local user group members with execution rights for this command.

Examples

Enabling ND snooping RA drop on VLAN 100:

switch(config)# nd-snooping enable
vlan 100
switch(config-vlan-100)# nd-snooping ra-drop
switch(config-vlan-100)# exit
switch(config)#

Disabling ND snooping RA drop on VLAN 100:

switch(config)# vlan 100
switch(config-vlan-100)# no nd-snooping ra-drop
switch(config-vlan-100)# exit
switch(config)#