Security Request - IPv6 RA Guard

RouterOS RouterOS beta
1

Please implement the Router Advertisement Guard on switching and bridging.
More information:
https://tools.ietf.org/html/rfc6105
https://tools.ietf.org/html/rfc7113

http://forum.mikrotik.com/t/ipv6-router-advertisement-packet-filtering-in-switched-network/135848/1
This is an important security feature: https://www.google.com/search?q=IPv6+Router+Advertisement+Guard

2

Sounds like a sensible request.

Cisco offers it as a feature and for good reason:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-3s/ip6f-xe-3s-book/ip6-ra-guard.html

3

The following forum post appear to provide the necessary requirements to allow one to ‘tick the box’ to comply with RFC 6105 or superseding RFC 7113:

[SOLVED] CRS - Hardware offloaded (MC-LAG compatible) bridge with IPv6 RA Guard

4

Seems to be implemented now:

5

Since RouterOS 7.22:

*) bridge - added RA guard feature;