PurposeCommand or Action
Attaches the IPv6 RA Guard policy to the specified VLANs
across all switch and stack interfaces. The default policy is
attached if the attach-policy option is not used.
ipv6 dhcp guard [attach-policy policy_name]
Example:
Switch(config-vlan-config)#ipv6 nd raguard
attach-policy example_policy
Step 3
Confirms that the policy is attached to the specified VLANs
without exiting the configuration mode.
do show running-config
Example:
Switch#(config-if)# do show running-config
Step 4
How to Configure an IPv6 DHCP Guard Policy
Beginning in privileged EXEC mode, follow these steps to configure an IPv6 DHCP Guard policy:
SUMMARY STEPS
1.
configure terminal
2.
[no]ipv6 dhcp guard policy policy-name
3.
device-role {client | server}
4.
trusted-port
5.
default {device-role | trusted-port}
6.
no {device-role | trusted-port}
7.
do show ipv6 dhcp guard policy policy_name
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the DHCP Guard policy name and enters DHCP Guard
Policy configuration mode.
[no]ipv6 dhcp guard policy policy-name
Example:
Switch(config)# ipv6 dhcp guard policy
example_policy
Step 2
(Optional) device-role [client | server]—Specifies the role of
the device attached to the port.
device-role {client | server}
Example:
Switch(config-dhcp-guard)# device-role server
Step 3
• client—Default value, specifies that the attached device
is a client. Server messages are dropped on this port.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
366 OL-29434-01
Configuring IPv6 First Hop Security
How to Configure an IPv6 DHCP Guard Policy