IPv6 First-Hop Security Part 1: RA Guard and DHCPv6 Guard
Any device on an IPv6 segment can send a Router Advertisement and reconfigure every host's default gateway. This post configures RA Guard and DHCPv6 Guard, then floods rogue RAs to prove the switch blocks them.