Cisco 300 Series

IPv6 First Hop Security
517 OL-32830-01 Command Line Interface Reference Guide
25
Use the no ipv6 nd inspection attach-policy policy-name command to detach the
specific policy from the port.
Examples
Example 1—In the following example, the ND Inspection policy policy1 is attached
to the gi11 port:
switchxxxxxx(config)# interface gi11
switchxxxxxx(config-if)# ipv6 nd inspection attach-policy policy1
switchxxxxxx(config-if)# exit
Example 2—In the following example, the ND Inspection policy policy1 is attached
to the gi11 port and applied to VLANs 1-10 and 12-20:
switchxxxxxx(config)# interface gi11
switchxxxxxx(config-if)# ipv6 nd inspection attach-policy policy1 vlan
1-10,12-20
switchxxxxxx(config-if)# exit
Example 3—In the following example, the ND Inspection policy policy1 is attached
to the gi11 port and applied to VLANs 1-10 and the ND Inspection policy policy2 is
attached to the gi11 port and applied to VLANs 12-20:
switchxxxxxx(config)# interface gi11
switchxxxxxx(config-if)# ipv6 nd inspection attach-policy policy1 vlan 1-10
switchxxxxxx(config-if)# ipv6 nd inspection attach-policy policy2 vlan 12-20
switchxxxxxx(config-if)# exit
Example 4—In the following example, ND Inspection detaches policy policy1 from
the gi11 port:
switchxxxxxx(config)# interface gi11
switchxxxxxx(config-if)# no ipv6 nd inspection attach-policy policy1
switchxxxxxx(config-if)# exit