Configuration notes and feature limitations for IPv6 RA guard

  • MAC filters and MAC-based VLANs are not supported with IPv6 RA guard.
  • If an IPv6 ACL matching an ICMPv6 type RA packet is configured on an interface that is part of an RA guard-enabled VLAN, RA guard policy configuration takes precedence.
  • IPv6 RA guard does not offer protection in environments where IPv6 traffic is tunneled.
  • IPV6 RA guard can be configured on a switch port interface in the ingress direction and is supported only in the ingress direction; it is not supported in the egress direction.