Which statement about IPv6 RA Guard is true?

Which statement about IPv6 RA Guard is true?
A . It does not offer protection in environments where IPv6 traffic is tunneled
B . It cannot be configured on a switch port interface in the ingress direction.
C . Packets that are dropped by IPv6 RA Guard cannot be spanned.
D . It is not supported in hardware when TCAM is programmed.

View Answer

Answer: A

Explanation:

Restrictions for IPv6 RA Guard

+ The IPv6 RA Guard feature does not offer protection in environments where IPv6 traffic is tunneled.

+ This feature is supported only in hardware when the ternary content addressable memory (TCAM) is programmed.

+ This feature can be configured on a switch port interface in the ingress direction.

+ This feature supports host mode and router mode.

+ This feature is supported only in the ingress direction; it is not supported in the egress direction.

+ This feature is not supported on EtherChannel and EtherChannel port members.

+ This feature is not supported on trunk ports with merge mode.

+ This feature is supported on auxiliary VLANs and private VLANs (PVLANs). In the case of PVLANs, primary VLAN features are inherited and merged with port features.

+ Packets dropped by the IPv6 RA Guard feature can be spanned.

+ If the platform ipv6 acl icmp optimize neighbor-discovery command is configured, the IPv6 RA Guard feature cannot be configured and an error message will be displayed. This command adds default global Internet Control Message Protocol (ICMP) entries that will override the RA guard ICMP entries.

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-3s/ip6f-

xe-3s-book/ip6-ra-guard.html