display nd raguard policy

Function

The display nd raguard policy command displays the configuration of an IPv6 RA guard policy.

Format

display nd raguard policy [ policy-name ]

Parameters

Parameter	Description	Value
policy-name	Displays the configuration of the IPv6 RA guard policy with the specified name.	The value must be the name of an existing IPv6 RA guard policy.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

To view the matching rules configured in a specified IPv6 RA guard policy, run the display nd raguard policy command. RA messages can be forwarded only when they match all rules.

Example

# Display the IPv6 RA guard policy configured on the device.

<HUAWEI> display nd raguard policy
------------------------------------------------
    ID        nd-raguard-policy name
     0        p1
     1        p2
     2        p3
------------------------------------------------
    Total 3, printed 3

**Table 1** Description of the **display nd raguard policy** command output
Item	Description
ID	ID.
nd-raguard-policy name	Name of an IPv6 RA guard policy.
Total m, printed n	There are a total of m entries and n entries are printed.

# Display the configuration of the IPv6 RA guard policy named p1.

<HUAWEI> display nd raguard policy p1
ND raguard policy: p1
  if-match source-mac-address acl 4000
  if-match ipv6-source-address acl 2000
  if-match ra-prefix acl 2000
  hop-limit minimum 10
  hop-limit maximum 20
  router-preference maximum medium
  managed-address-flag on
  other-config-flag on

**Table 2** Description of the **display nd raguard policy** *policy-name* command output
Item	Description
ND raguard policy	Name of an IPv6 RA guard policy. To set the value, run the nd raguard policy command.
if-match source-mac-address acl	Number of the Layer 2 ACL that is used to match the source MAC address of RA messages. To set the value, run the if-match source-mac-address command.
if-match ipv6-source-address acl	Number of the basic ACL6 that is used to match the source IPv6 address of RA messages. To set the value, run the if-match ipv6-source-address command.
if-match ra-prefix acl	Number of the basic ACL6 that is used to match the IPv6 prefix of RA messages. To set the value, run the if-match prefix command.
hop-limit minimum	Minimum hop limit used to match RA messages. To set the value, run the hop-limit minimum command.
hop-limit maximum	Maximum hop limit used to match RA messages. To set the value, run the hop-limit maximum command.
router-preference maximum	Highest route preference used to match RA messages: high: high preference medium: medium preference low: low preference To set the value, run the router-preference maximum command.
managed-address-flag	M flag used to match RA messages: on: The M flag is set to 1. off: The M flag bit is set to 0. To set the value, run the managed-address-flag command.
other-config-flag	O flag used to match RA messages: on: The O flag is set to 1. off: The O flag bit is set to 0. To set the value, run the other-config-flag command.