Cisco 350 Series Administration Guide

Security: IPv6 First Hop Security
IPv6 First Hop Security Overview
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4 442
26
IPv6 First Hop Security Components
IPv6 First Hop Security includes the following features:
• IPv6 First Hop Security Common
• RA Guard
• ND Inspection
• Neighbor Binding Integrity
• DHCPv6 Guard
• IPv6 Source Guard
These components can be enabled or disabled on VLANs.
There are two empty, pre-defined policies per each feature with the following names:
vlan_default and port_default. The first one is attached to each VLAN that is not attached to a
user-defined policy and the second one is connected to each interface and VLAN that is not
attached to a user-defined policy. These policies cannot be attached explicitly by the user. See
Policies, Global Parameters and System Defaults.
IPv6 First Hop Security Pipe
If IPv6 First Hop Security is enabled on a VLAN, the switch traps the following messages:
• Router Advertisement (RA) messages
• Router Solicitation (RS) messages
• Neighbor Advertisement (NA) messages
NA message Neighbor Advertisement message
NDP Neighbor Discovery Protocol
NS message Neighbor Solicitation message
RA message Router Advertisement message
RS message Router Solicitation message
SAVI Source Address Validation Improvement
Name Description

Cisco 350 Series Specifications

General

Model	Cisco 350 Series
Category	Switch
Ports	8, 24, 48
PoE	Available on some models
Layer	Layer 2
Switching Capacity	Up to 104 Gbps
VLAN Support	Yes (up to 256 VLANs)
QoS	Yes
Management	Web, CLI, SNMP
Security Features	ACLs, 802.1X, Port Security
Jumbo Frame Support	Yes
Power Supply	Internal
Dimensions	Varies by model
Weight	Varies by model
Operating Temperature	0°C to 45°C (32°F to 113°F)
Storage Temperature	-20°C to 70°C (-4°F to 158°F)
Humidity	10% to 90% non-condensing
Port Type	Gigabit Ethernet, Fast Ethernet (depending on model)