Cisco 500 Series - Chapter 23: Security: Ipv6 First Hop Security

To Next Page

To Previous Page

Cisco 500 Series Stackable Managed Switch Administration Guide 511

Security: IPv6 First Hop Security

This section describes how IPv6 First Hop Security (FHS) works and how to

configure it in the GUI.

It covers the following topics:

• IPv6 First Hop Security Overview

• Router Advertisement Guard

• Neighbor Discovery Inspection

• DHCPv6 Guard

• Neighbor Binding Integrity

• IPv6 Source Guard

• Attack Protection

• Policies, Global Parameters and System Defaults

• Common Tasks

• Default Settings and Configuration

• Configuring IPv6 First Hop Security through Web GUI

Main Page

Default Chapter3
- Table of Contents3
Chapter 1: Getting Started12
- Starting the Web-Based Configuration Utility12
- Launching the Configuration Utility13
- Quick Start Device Configuration16
- Interface Naming Conventions17
- Differences between 500 Devices<50017
- Window Navigation19
Chapter 2: Status and Statistics24
- System Summary24
- Ethernet Interfaces24
- Etherlike Statistics26
- GVRP Statistics27
- 802.1X EAP Statistics28
- ACL Statistics29
- TCAM Utilization30
- Health31
- Rmon31
- View Log39
Chapter 3: Administration: System Log40
- Setting System Log Settings40
- Setting Remote Logging Settings42
- Viewing Memory Logs44
Chapter 4: Administration: File Management46
- System Files46
- Upgrade/Backup Firmware/Language49
- Active Image53
- Download/Backup Configuration/Log54
- Configuration File Backwards Compatibility54
- Configuration Files Properties60
- Copy/Save Configuration61
- Auto Configuration/Image Update Via DHCP62
Chapter 5: Administration: Stack Management73
- Overview73
- Types of Units in Stack75
- Unit Leds76
- Stack Topology76
- Topology Discovery77
- Unit ID Assignment78
- Master Selection Process80
- Stack Changes80
- Unit Failure in Stack82
- Software Auto Synchronization in Stack84
- Stack Unit Mode84
- Stack Ports88
- Port Speeds92
- Default Configuration96
- Interactions with Other Features96
- System Modes96
Chapter 6: Administration102
- Device Models103
- System Settings105
- Console Settings (Autobaud Rate Support)108
- Management Interface109
- System Mode and Stack Management109
- User Accounts109
- Defining Idle Session Timeout109
- Time Settings110
- System Log110
- File Management110
- Rebooting the Device110
- Routing Resources112
- Health116
- Diagnostics118
- Discovery - Bonjour118
- Discovery - LLDP119
- Discovery - CDP119
- Ping119
- Traceroute121
Chapter 7: Administration: Time Settings124
- System Time Options125
- SNTP Modes126
- Configuring System Time127
Chapter 8: Administration: Diagnostics138
- Copper Ports Tests138
- Displaying Optical Module Status140
- Configuring Port and VLAN Mirroring142
- Viewing CPU Utilization and Secure Core Technology143
Chapter 9: Administration: Discovery146
- Bonjour146
  - Bonjour in Layer 2 System Mode146
  - Bonjour in Layer 3 System Mode147
- LLDP and CDP148
- Configuring LLDP149
- Configuring CDP170
- CDP Statistics178
Chapter 10: Port Management180
- Configuring Ports180
- Port Configuration181
- Loopback Detection186
- Configuring Loopback Detection187
- Link Aggregation188
  - Configuring Lag Settings192
  - Configuring Lacp193
- Udld196
- Poe196
- Configuring Green Ethernet196
  - Green Ethernet Overview196
  - Az Energy Efficient Ethernet Feature198
Chapter 11: Port Management: Unidirectional Link Detection204
- UDLD Overview204
- UDLD Operation205
- Usage Guidelines207
- Dependencies on Other Features208
- Default Settings and Configuration208
- Before You Start209
- Common UDLD Tasks209
- Configuring UDLD210
Chapter 12: Smartport214
- Overview215
- What Is a Smartport216
- Smartport Types216
- Special Smartport Types217
- Smartport Macros218
- Applying a Smartport Type to an Interface219
- Macro Failure and the Reset Operation220
- How the Smartport Feature Works220
- Auto Smartport221
- Error Handling225
- Default Configuration225
- Relationships with Other Features and Backwards Compatibility226
- Common Smartport Tasks226
- Configuring Smartport Using the Web-Based Interface228
- Built-In Smartport Macros233
Chapter 13: Port Management: Poe246
- Poe on the Device246
- Poe Configuration Considerations247
- Poe Properties249
- Poe Settings250
Chapter 14: VLAN Management254
- Overview254
- Regular Vlans263
  - Interface Settings266
  - Vlan Membership268
- Private VLAN Settings271
- GVRP Settings272
- VLAN Groups273
- Voice VLAN278
- Voice Vlan Configuration285
- Access Port Multicast TV VLAN291
  - Igmp Snooping292
  - Differences between Regular and Multicast Tv Vlans292
- Customer Port Multicast TV VLAN294
- Port Multicast Vlan Membership296
Chapter 15: Spanning Tree298
- STP Flavors298
- STP Status and Global Settings299
- Spanning Tree Interface Settings301
- Rapid Spanning Tree Settings303
- Multiple Spanning Tree306
- MSTP Properties306
- Vlans to a MSTP Instance307
- MSTP Instance Settings308
- MSTP Interface Settings309
Chapter 16: Managing MAC Address Tables312
- Static MAC Addresses313
- Dynamic MAC Addresses314
- Reserved MAC Addresses315
Chapter 17: Multicast316
- Multicast Forwarding316
- Multicast Properties322
- MAC Group Address322
- IP Multicast Group Addresses324
- Ipv4 Multicast Configuration326
- Ipv6 Multicast Configuration332
  - Mld Snooping332
  - Mld Proxy336
- IGMP/MLD Snooping IP Multicast Group338
- Multicast Router Ports339
- Forward All340
- Unregistered Multicast340
Chapter 18: IP Configuration342
- Overview342
- Loopback Interface345
- Ipv4 Management and Interfaces346
- DHCP Server368
- Ipv6 Management and Interfaces377
- Domain Name400
Chapter 19: IP Configuration: Ripv2405
- Overview405
- How Rip Operates on the Device406
  - Enabling Rip406
  - Passive Mode407
- Configuring RIP411
- Access Lists416
Chapter 20: IP Configuration: VRRP419
- Overview419
- Configurable Elements of VRRP423
  - Vrrp Router Priority and Preemption425
  - Vrrp Advertisements426
- Configuring VRRP426
  - Virtual Routers426
  - Vrrp Statistics428
Chapter 21: Security430
- Defining Users431
- Configuring TACACS434
- Configuring RADIUS439
  - Accounting Using a Radius Server440
  - Radius Workflow441
- Key Management444
- Management Access Method447
  - Active Access Profile448
  - Defining Profile Rules450
- Management Access Authentication452
- Secure Sensitive Data Management454
- SSL Server454
  - Ssl Overview454
  - Ssl Server Authentication Settings455
- SSH Server456
- SSH Client457
- Configuring TCP/UDP Services457
- Defining Storm Control458
- Configuring Port Security459
- 460462
- Denial of Service Prevention462
- DHCP Snooping472
- IP Source Guard472
- ARP Inspection476
- First Hop Security482
Chapter 22: Security: 802.1X Authentication483
- Overview of 802.1X483
- Authentication Server485
- Authenticator Overview486
- Multiple Authentication Methods488
- Common Tasks496
- Configuration through the GUI497
- Defining Time Ranges509
- Authentication Method and Port Mode Support510
Chapter 23: Security: Ipv6 First Hop Security513
- Ipv6 First Hop Security Overview514
- Router Advertisement Guard518
- Neighbor Discovery Inspection518
- Dhcpv6 Guard519
- Neighbor Binding Integrity520
- Ipv6 Source Guard523
- Attack Protection524
- Policies, Global Parameters and System Defaults525
- Common Tasks527
- Default Settings and Configuration529
- Before You Start529
- Configuring Ipv6 First Hop Security through Web GUI530
Chapter 24: Security: SSH Client548
- Secure Copy (SCP) and SSH548
- Protection Methods549
- SSH Server Authentication551
- SSH Client Authentication552
- Supported Algorithms552
- Before You Begin553
- Common Tasks553
- SSH Client Configuration through the GUI554
Chapter 25: Security: SSH Server559
- Overview559
- Common Tasks560
- SSH Server Configuration Pages561
Chapter 26: Security: Secure Sensitive Data Management564
- Introduction564
- Ssd Management565
- SSD Rules565
- SSD Properties570
- Configuration Files573
- SSD Management Channels578
- Menu CLI and Password Recovery578
- Configuring SSD579
Chapter 27: Access Control582
- Access Control Lists582
  - Acl Logging584
  - Configuring Acls585
- MAC-Based Acls586
- Ipv4-Based Acls588
- Ipv6-Based Acls593
- ACL Binding596
Chapter 28: Quality of Service600
- Qos Features and Components601
  - Qos Modes602
  - Qos Workflow603
- Configuring Qos - General604
- Qos Basic Mode617
  - Workflow to Configure Basic Qos Mode617
  - Interface Qos Settings618
- Qos Advanced Mode619
- Managing Qos Statistics630
  - Policer Statistics630
  - Viewing Queues Statistics632
Chapter 29: SNMP634
- SNMP Versions and Workflow634
- Model Oids637
- SNMP Engine ID638
- Configuring SNMP Views640
- Creating SNMP Groups641
- Managing SNMP Users643
- Defining SNMP Communities645
- Defining Trap Settings647
- Notification Recipients648
- Defining Snmpv3 Notification Recipients650
- SNMP Notification Filters652

Cisco 500 Series - Chapter 23: Security: Ipv6 First Hop Security

Table of Contents

Other manuals for Cisco 500 Series

Related product manuals