Which statement about IPv6RAGuardistrue?

Which statement about IPv6RAGuardistrue?
A . It does not offer protection in environments where IPv6 traffic is tunneled
B . It cannot be configured on a switchport interface in the ingress direction.
C . Packets that are dropped byIPv6RA Guard cannot be spanned.
D . It is not supported in hardware when TCAM is programmed

View Answer

Answer: A

Explanation:

Restrictions for IPv6RA Guard

+ The IPv6RA Guard feature does not offer protection in environments where IPv 6 traffic is tunneled

+ This feature is supported only in hardware when the ternary content addressable memory (TCAM) is programmed

+ This feature can be configured on a switchport interface in the ingress direction.

+ This feature supports host mode and router mode

+ This feature is supported only in the ingress direction; it is not supported in the egress direction.

+ This feature is not supported on EtherChannel and EtherChannel port members.

+ This feature is not supported on trunk ports with merge mode.

+ This feature is supported on auxiliary VLANs and private VLANs (PVLANs). In the case of P VLANs, primary VLAN features are inherited and merged with port features.

+ Packets dropped by the IPv6RA Guard feature can be spanned.

+ If the platform ipv6aclicmp optimize neighbor-discovery command is configured, the IPv6RA

Guard feature cannot be configured and an error message will be displayed. This command adds default global Internet Control Message Protocol (ICMP) entries that will override the RA guard ICMP entries.

Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-3s/ip6f-xe-3s-book/ip6-ra-guard.html