Cisco Catalyst 2960-XR - How to Configure an Ipv6 Neighbor Discovery Inspection Policy

PurposeCommand or Action
Displays contents of a binding table.show ipv6 neighbor binding
Example:
Switch# show ipv6 neighbor binding
Step 6
How to Configure an IPv6 Neighbor Discovery Inspection Policy
Beginning in privileged EXEC mode, follow these steps to configure an IPv6 ND Inspection Policy:
SUMMARY STEPS
1.
configure terminal
2.
[no]ipv6 nd inspection policy policy-name
3.
device-role {host | monitor | router | switch}
4.
drop-unsecure
5.
limit address-count value
6.
sec-level minimum value
7.
tracking {enable [reachable-lifetime {value | infinite}] | disable [stale-lifetime {value | infinite}]}
8.
trusted-port
9.
validate source-mac
10.
no {device-role | drop-unsecure | limit address-count | sec-level minimum | tracking | trusted-port |
validate source-mac}
11.
default {device-role | drop-unsecure | limit address-count | sec-level minimum | tracking | trusted-port
| validate source-mac}
12.
do show ipv6 nd inspection policy policy_name
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the ND inspection policy name and
enters ND Inspection Policy configuration mode.
[no]ipv6 nd inspection policy policy-name
Example:
Switch(config)# ipv6 nd inspection policy example_policy
Step 2
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
358 OL-29434-01
Configuring IPv6 First Hop Security
How to Configure an IPv6 Neighbor Discovery Inspection Policy