Restrictions for IPv6 RA Guard - The IPv6 RA Guard feature does not offer protection in environments where IPv6 traffic is tunneled. - This feature is supported only in hardware when the ternary content addressable memory (TCAM) is programmed. - This feature can be configured on a switch port interface in the ingress direction. - This feature supports host mode and router mode. - This feature is supported only in the ingress direction; it is not supported in the egress direction. - This feature is not supported on EtherChannel and EtherChannel port members. - This feature is not supported on trunk ports with merge mode. - This feature is supported on auxiliary VLANs and private VLANs (PVLANs). In the case of PVLANs, primary VLAN features are inherited and merged with port features. - Packets dropped by the IPv6 RA Guard feature can be spanned. Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipv6_fhsec/configuration/xe-16-10/ip6f-xe-16- 10-book/ip6-ra-guard.html#GUID-589AF00C-7499-439F-AD23-51005D61CAB7