Rogue RA what is this and how to counter it? This content comes from one of my lectures on "security" module related to IP V6 section. There is no reference in the suggested book or lecture slides what that exactly is. However it is constantly added up to content like: "Apply appropriate IPv6 controls, even if "IPv4" only" (eg. rogue RA protection) "IPv6 security issues: * IpV4 equivalents * new issues (IPv6 rogue RA) " I tried to google - the content is not for mortal students. Could you please explain this phenomena of "rogue router advertisement". I really need little detail, just what RA is, what exactly it does and why rogue RA is bad. Thank you very much,

Router Advertisements (RAs) can provide autoconfiguration of default gateways for hosts instead of manually configuring each system. The downside is similar to the Rogue DHCP Server scenario: A Rogue RA coming from a misconfigured router or even a Windows desktop in a wireless network, for example, can offer a default gateway that doesn't work as intended.

Appropriate controls could be ACLs to block these from untrusted interfaces or implement RA Snooping (aka RA Guard) similar to DHCP Snooping.

_See source of Rogue RA info @ RFC6104Rogue IPv6 Router Advertisement Problem Statement_

_RA Guard config @Cisco IPv6 Configuration Guide_