Cisco 300 Series

IPv6 First Hop Security
OL-32830-01 Command Line Interface Reference Guide 500
25
25.14 ipv6 dhcp guard attach-policy (port
mode)
To attach a DHCPv6 Guard policy to a specific port, use the ipv6 dhcp guard
attach-policy command in Interface Configuration mode. To return to the default,
use the no form of this command.
Syntax
ipv6 dhcp guard attach-policy
policy-name [vlan vlan-list ]
no ipv6 dhcp guard attach-policy [
policy-name ]
Parameters
• policy-name —The DHCPv6 Guard policy name (up to 32 characters).
• vlan vlan-list —Specifies that the DHCPv6 Guard policy is to be attached to
the VLAN(s) in
vlan-list . If the vlan keyword is not configured, the policy is
applied to all VLANs on the device on which DHCPv6 Guard is enabled.
Default Configuration
The DHCPv6 Guard default policy is applied.
Command Mode
Interface (Ethernet, Port Channel) Configuration mode
User Guidelines
Use this command to attach a DHCPv6 Guard policy to a port.
Each time the command is used, it overrides the previous command within the
same policy.
If a policy specified by the
policy-name argument is not defined, the command is
rejected.
Multiple policies with the vlan keyword can be attached to the same port if they
do not have common VLANs.
The set of rules that is applied to an input packet is built in the following way:
• The rules, configured in the policy attached to the port on the VLAN on
which the packet arrived are added to the set.