Cisco Catalyst 2960-XR - How to Configure Ipv6 Source Guard

DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the VLANs to which the IPv6 Snooping policy will be
attached ; enters the VLAN interface configuration mode.
vlan configuration vlan_list
Example:
Switch(config)# vlan configuration 334
Step 2
Attaches the IPv6 Neighbor Discovery policy to the specified
VLANs across all switch and stack interfaces. The default policy
ipv6 dhcp guard [attach-policy policy_name]
Example:
Switch(config-vlan-config)#ipv6 dhcp guard
attach-policy example_policy
Step 3
is attached if the attach-policy option is not used. The default
policy is, device-role client, no trusted-port.
Confirms that the policy is attached to the specified VLANs
without exiting the configuration mode.
do show running-config
Example:
Switch#(config-if)# do show running-config
Step 4
How to Configure IPv6 Source Guard
SUMMARY STEPS
1.
configure terminal
2.
[no] ipv6 source-guard policy policy_name
3.
[deny global-autoconf] [permit link-local] [default{. . . }] [exit] [no{. . . }]
4.
end
5.
show ipv6 source-guard policy policy_name
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 369
Configuring IPv6 First Hop Security
How to Configure IPv6 Source Guard