Cisco 300 Series User Manual

IPv6 First Hop Security
533 OL-32830-01 Command Line Interface Reference Guide
25
The policies cannot be attached by the ipv6 nd raguard attach-policy (port mode)
or ipv6 nd raguard attach-policy (VLAN mode) command. The vlan_default policy
is attached by default to a VLAN, if no other policy is attached to the VLAN. The
port_default policy is attached by default to a port, if no other policy is attached to
the port.
You can define a policy using the ipv6 nd raguard policy command multiple times.
If an attached policy is removed, it is detached automatically before removing.
The following commands can be configured in RA Guard Policy Configuration
mode:
• device-role (RA Guard Policy)
• hop-limit
• managed-config-flag
• match ra addresshop-limit
• match ra prefixes
• other-config-flag
• router-preference
Examples
Example 1—The following example defines an RA Guard policy named policy1,
places the router in RA Guard Policy Configuration mode, and disenabled
validation of the Other Configuration flag, and sets the device role as router:
switchxxxxxx(config)# ipv6 nd raguard policy policy1
switchxxxxxx(config-ra-guard)# other-config-flag disable
switchxxxxxx(config-ra-guard)# device-role router
switchxxxxxx(config-ra-guard)# exit
Example 2—The following example defines an RA Guard named policy1 using
multiple steps:
switchxxxxxx(config)# ipv6 nd raguard policy policy1
switchxxxxxx(config-ra-guard)# other-config-flag disable

Cisco 300 Series Specifications

General

Model	Cisco 300 Series
Category	Switch
Dimensions	Varies by model
Weight	Varies by model
Power over Ethernet (PoE)	Available on select models
Management	Web-based GUI, SNMP, CLI
VLANs	Up to 256
Security Features	ACLs, 802.1X, Port Security
Humidity	10% to 90% non-condensing
Ports	8, 16, 24, 48