Cisco 500 Series - Page 533

Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
531 Cisco 500 Series Stackable Managed Switch Administration Guide
23
- No Verification—Disables verification of the high boundary of
Advertised Default Router Preference.
- Low—Specifies the maximum allowed Advertised Default Router
Preference value. The following values are acceptable: low, medium and
high (see RFC4191).
- Medium—Specifies the maximum allowed Advertised Default Router
Preference value. The following values are acceptable: low, medium and
high (see RFC4191).
- High—Specifies the maximum allowed Advertised Default Router
Preference value. The following values are acceptable: low, medium and
high (see RFC4191).
To create a RA Guard policy click Add and enter the above parameters. To
configure system-defined default policies or existing user defined policy select
the policy in the policy table and click Edit.
To attach this policy to an interface:
• Attach Policy to VLAN—Click to jump to Policy Attachment (VLAN) page
where you can attach this policy to a VLAN.
• Attach Policy to Interface—Click to jump to Policy Attachment (Port)
page where you can attach this policy to a port.
DHCPv6 Guard Settings
Use the DHCPv6 Guard Settings page to enable the DHCPv6 Guard feature on a
specified group of VLANs and to set the global configuration values for this
feature. If required, a policy can be added or the system-defined default DHCPv6
Guard policies can be configured in this page.
To configure DHCPv6 Guard:
STEP 1 Click Security > IPv6 First Hop Security > DHCPv6 Guard Settings.
STEP 2 Enter the following global configuration fields:
• DHCPv6 Guard VLAN List—Enter one or more VLANs on which DHCPv6
Guard is enabled.