What is a limitation of IPv6 RA Guard?

What is a limitation of IPv6 RA Guard?
A . It is not supported in hardware when TCAM is programmed
B . It does not offer protection in environments where IPv6 traffic is tunneled.
C . It cannot be configured on a switch port interface in the ingress direction
D . Packets that are dropped by IPv6 RA Guard cannot be spanned

View Answer

Answer: B

Explanation:

Restrictions for IPv6 RA Guard

✑ The IPv6 RA Guard feature does not offer protection in environments where IPv6 traffic is tunneled.

✑ This feature is supported only in hardware when the ternary content addressable memory (TCAM) is programmed.

✑ This feature can be configured on a switch port interface in the ingress direction.

✑ This feature supports host mode and router mode.

✑ This feature is supported only in the ingress direction; it is not supported in the egress direction.

✑ This feature is not supported on EtherChannel and EtherChannel port members.

✑ This feature is not supported on trunk ports with merge mode.

✑ This feature is supported on auxiliary VLANs and private VLANs (PVLANs). In the case of PVLANs, primary VLAN features are inherited and merged with port features.

✑ Packets dropped by the IPv6 RA Guard feature can be spanned.

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16-10/ip6f-xe-16-10-book/ip6-ra-guard.html#GUID-589AF00C-7499-439F-AD23-51005D61CAB7