Cisco 300 Series

IPv6 First Hop Security
569 OL-32830-01 Command Line Interface Reference Guide
25
User Guidelines
Use this command to change the global configuration specified by the ipv6 nd
raguard router-preference command on the port on which this policy applies.
Use the disable keyword to disable of verification in both global or VLAN
configuration.
Example
The following example defines an RA Guard policy named policy1, places the
switch in RA Guard Policy Configuration mode, and defines a minimum Default
Router Preference value of medium:
switchxxxxxx(config)# ipv6 nd raguard policy policy1
switchxxxxxx(config-ra-guard)# router-preference minimum medium
switchxxxxxx(config-ra-guard)# exit
25.63 sec-level minimum
To specify the minimum security level value within an Ipv6 ND Inspection policy,
use the sec-level minimum command in ND Inspection policy Configuration mode.
To return to the default, use the no form of this command.
Syntax
sec-level minimum
value | disable
no sec-level minimum
Parameters
• value —Sets the minimum security level, which is a value from 0 through 7.
• disable—Disables verification of security level parameter
Default Configuration
Policy attached to port or port channel: the value configured in the policy attached
to the VLAN.
Policy attached to VLAN: global configuration.