Cisco 300 Series

IPv6 First Hop Security
OL-32830-01 Command Line Interface Reference Guide 536
25
25.38 ipv6 neighbor binding
To globally enable the Neighbor Binding (NB) integrity feature on a VLAN, use the
ipv6 neighbor binding command in VLAN Configuration mode. To return to the
default, use the no form of this command.
Syntax
ipv6 neighbor binding
no ipv6 neighbor binding
Parameters
N/A
Default Configuration
NB integrity on a VLAN is disabled.
Command Mode
Interface (VLAN) Configuration mode
User Guidelines
NB integrity establishes binding for neighbors connected to the perimetrical ports
(see the device-role (Neighbor Binding) command) belonging to the VLANs on
which the feature is enabled.
Examples
Example 1—The following example enables NB integrity on VLAN 100:
switchxxxxxx(config)# interface vlan 100
switchxxxxxx(config-if)# ipv6 neighbor binding
switchxxxxxx(config-if)# exit
Example 2—The following example enables NB integrity on VLANs 100-107:
switchxxxxxx(config)# interface range vlan 100-107
switchxxxxxx(config-if-range)# ipv6 neighbor binding