Cisco 500 Series - Page 539

Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
537 Cisco 500 Series Stackable Managed Switch Administration Guide
23
• Address Prefix Validation—Select one of the following options to specify
validation of addresses:
- Inherited—Validation option is the same as the global value.
- Enable—Enable validation of addresses.
- Disable—Disable validation of addresses
Global Address Binding Configuration:
• Inherit Address Binding Settings—Enable to use the global address
binding settings.
• Binding from NDP Messages—To change the global configuration of
allowed configuration methods of global IPv6 addresses within an IPv6
Neighbor Binding policy, select one of the following options:
- Any—Any configuration methods (stateless and manual) are allowed for
global IPv6 bound from NDP messages
- Stateless—Only stateless auto configuration is allowed for global IPv6
bound from NDP messages.
- Disable—Binding from NDP messages is disabled.
Binding from DHCPv6 Messages:—Select to enable binding from
DHCPv6.
Neighbor Binding Entry Limits—See above.
• Entries per VLAN—Select Inherited to use global value, No Limit to set no
limit on the number of entries and User Defined to set a special value for
this policy.
• Entries per Interface—Select Inherited to use global value, No Limit to set
no limit on the number of entries and User Defined to set a special value for
this policy.
• Entries per MAC Address—Select Inherited to use global value, No Limit
to set no limit on the number of entries and User Defined to set a special
value for this policy.
STEP 5 Click Apply to add the settings to the Running Configuration file.
To attach this policy to an interface:
• Attach Policy to VLAN—Click to jump to Policy Attachment (VLAN) page
where you can attach this policy to a VLAN.