Cisco Catalyst 2960-XR - How to Configure an Ipv6 DHCP Guard Policy

PurposeCommand or Action
Attaches the IPv6 RA Guard policy to the specified VLANs
across all switch and stack interfaces. The default policy is
attached if the attach-policy option is not used.
ipv6 dhcp guard [attach-policy policy_name]
Example:
Switch(config-vlan-config)#ipv6 nd raguard
attach-policy example_policy
Step 3
Confirms that the policy is attached to the specified VLANs
without exiting the configuration mode.
do show running-config
Example:
Switch#(config-if)# do show running-config
Step 4
How to Configure an IPv6 DHCP Guard Policy
Beginning in privileged EXEC mode, follow these steps to configure an IPv6 DHCP Guard policy:
SUMMARY STEPS
1.
configure terminal
2.
[no]ipv6 dhcp guard policy policy-name
3.
device-role {client | server}
4.
trusted-port
5.
default {device-role | trusted-port}
6.
no {device-role | trusted-port}
7.
do show ipv6 dhcp guard policy policy_name
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the DHCP Guard policy name and enters DHCP Guard
Policy configuration mode.
[no]ipv6 dhcp guard policy policy-name
Example:
Switch(config)# ipv6 dhcp guard policy
example_policy
Step 2
(Optional) device-role [client | server]—Specifies the role of
the device attached to the port.
device-role {client | server}
Example:
Switch(config-dhcp-guard)# device-role server
Step 3
• client—Default value, specifies that the attached device
is a client. Server messages are dropped on this port.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
366 OL-29434-01
Configuring IPv6 First Hop Security
How to Configure an IPv6 DHCP Guard Policy