Which configuration should be used to block rogue IPv6 router advertisements instead of using IPv6 RA Guard?
Choose an answer
Tap an option to check your answer.
Correct answer: PVLANs with promiscuous ports assigned to routers and isolated ports for hosts.
Why this is the answer
Private VLANs (PVLANs) can effectively block rogue IPv6 router advertisements. By configuring the router's port as a promiscuous port, it can communicate with all other ports within the PVLAN. Host ports are configured as isolated ports, meaning they can only communicate with promiscuous ports and not with other isolated or community ports. This prevents a rogue host from sending router advertisements to other hosts on the same PVLAN segment. VACLs are not specifically designed for blocking IPv6 RA messages and would require complex filtering rules. Community ports allow communication within the community and with promiscuous ports, which would still allow rogue RAs between community members. IPv4 ACLs are irrelevant for IPv6 traffic.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed