show access-security router-advertisement state

Syntax

Description

Display the IPv6 Router Advertisement (RA) guard state information. Stateful RA guard enables the switch to learn about the sources of RA messages for a certain period of time. When the learning period ends, the switch has a record of which interfaces are attached to links with valid IPv6 routers. If there is no valid IPv6 router attached to the interface, the switch dynamically transitions the interface from the learning state into the blocking state. Subsequent RA messages received after the transition to blocking state are dropped. If there is a valid IPv6 router attached to the interface, the interface transitions to the forwarding state, and subsequent RA messages that can be validated against the configured policy are forwarded.

Options

interface interface-name

(Optional) Display the RA guard entries for the specified interface.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show access-security router-advertisement state command. Output fields are listed in the approximate order in which they appear.

Table 1: show access-security router-advertisement state Output Fields
Field Name	Field Description
`Interface`	Displays the interface on which stateful IPv6 RA guard is enabled.
`State`	Displays one of the following states: `OFF`—The interface operates as if RA guard is not available. `BLOCKED`—The interface blocks ingress RA messages. `FORWARDING`—The interface forwards ingress RA messages that can be validated against the configured policy. `LEARNING`—The switch is actively acquiring information about the IPv6 routing device connected to the interface. `TRUSTED`—The interface forwards all ingress RA messages without performing policy checks.

Sample Output