Cisco 500 Series Administration Guide

Security: IPv6 First Hop Security
DHCPv6 Guard
517 Cisco 500 Series Stackable Managed Switch Administration Guide
23
• Validation of received Neighbor Discovery protocol messages.
• Egress filtering
Message Validation
ND Inspection validates the Neighbor Discovery protocol messages, based on an
ND Inspection policy attached to the interface. This policy can be defined in the
ND Inspection Settings page.
If a message does not pass the verification defined in the policy, it is dropped and
a rate limited SYSLOG message is sent.
Egress Filtering
ND Inspection blocks forwarding of RS and CPS messages on interfaces
configured as host interfaces.
DHCPv6 Guard
DHCPv6 Guard treats the trapped DHCPv6 messages. DHCPv6 Guard supports
the following functions:
• Filtering of received DHCPv6 messages.
DHCP Guard discards DHCPv6 reply messages received on interfaces
whose role is client. The interface role is configured in the DHCP Guard
Settings page.
• Validation of received DHCPv6 messages.
DHCPv6 Guard validates DHCPv6 messages that match the filtering based
on the DHCPv6 Guard policy attached to the interface.
If a message does not pass verification, it is dropped. If the logging packet drop
configuration on the FHS common component is enabled, a rate limited SYSLOG
message is sent.

Cisco 500 Series Specifications

General

Model	Cisco 500 Series
Category	Switch
Mounting	Rack-mountable
Management	Web-based, CLI, SNMP
Ports	24, 48
Port Speed	10/100/1000 Mbps
PoE Support	Available on some models
Switching Capacity	Up to 176 Gbps
MAC Address Table Size	16, 000 entries
Security	ACLs, 802.1X
Quality of Service (QoS)	Yes
Dimensions	Varies by model
Weight	Varies by model
Humidity	10% to 90% non-condensing
Power Supply	Internal
Power Consumption	Varies by model
Jumbo Frame Support	Up to 9216 bytes