An access switch has ipv6 nd raguard enabled on its access ports. A workstation on an access port sends a rogue Router Advertisement advertising itself as the default gateway. What will the switch do with that RA?
Choose an answer
Tap an option to check your answer.
Correct answer: Drop the RA at the port because the port is treated as untrusted for RAs.
Why this is the answer
IPv6 ND RA Guard (Router Advertisement Guard) is a security feature designed to prevent rogue IPv6 routers from advertising themselves on a network. When ipv6 nd raguard is enabled on an access port, that port is automatically treated as untrusted for Router Advertisements (RAs). Any RA received on an untrusted port is immediately dropped by the switch, preventing the rogue advertisement from propagating and potentially causing a denial of service or man-in-the-middle attack. The switch does not forward it to the control plane for further inspection, nor does it accept and forward it, as that would defeat the purpose of RA Guard. It also does not convert it to a DHCPv6 advertisement; these are distinct protocols.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed