Cisco Catalyst 3560-X User Manual

1-22
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring IPv6 Unicast Routing
Configuring IPv6
Configuring IPv6 Source Guard
Configuration Examples for Implementing First Hop Security in IPv6
This example shows you how to attach a snooping policy to a VLAN and to configure an RA trusted
router port and DHCP trusted server port:
Switch(config)# vlan configuration 100
Switch(config-vlan-config)# ipv6 snooping
Switch(config-vlan-config)# exit
Switch(config)# ipv6 nd raguard policy router
Switch(config-nd-raguard)# device-role router
Switch(config-nd-raguard)# exit
Switch(config)# ipv6 dhcp guard policy server
Switch(config-dhcp-guard)# device-role server
Switch(config-dhcp-guard)# exit
Step 5
exit Exits the DHCP guard policy global configuration mode.
Step 6
interface type number Specifies an interface type and number and enters the interface
configuration mode.
Step 7
ipv6 dhcp guard attach-policy
policy-name
Or
vlan configuration vlan-id
Attaches the DHCP guard policy to an interface or VLAN.
Step 8
show ipv6 dhcp guard policy
policy-name
Displays the DHCP guard policy configuration.
Action or Command Purpose
Step 1
enable Enables privileged EXEC mode. Enter your password if prompted.
Step 2
configure terminal Enters the global configuration mode.
Step 3
ipv6 source-guard policy policy-name Specifies the source guard policy name and enters the source guard policy
configuration mode.
Step 4
permit link-local Allows all data traffic that is sourced by a link-local address.
Step 5
deny global-autoconf Denies data traffic from auto-configured global addresses. This is useful
when all global addresses on a link are DHCP-assigned and the
administrator wants to block hosts with self-configured addresses to send
traffic.
Step 6
ipv6 source-guard [attach-policy
policy-name]
Specifies the policy name.
(Optional) attach-policy policy-name—Filters based on the policy name
Step 7
exit Exits the source guard policy configuration mode.
Step 8
show ipv6 source-guard policy policy
name
Shows the policy configuration and all the interfaces where the policy is
applied.
Action or Command Purpose

Cisco Catalyst 3560-X Specifications

General

Enclosure Type	Rack-mountable - 1U
Subtype	Gigabit Ethernet
Ports	48 x 10/100/1000 + 4 x SFP
Flash Memory	64 MB
Power Device	Internal power supply
Voltage Required	AC 120/230 V (50/60 Hz)
Operating System	Cisco IOS
Device Type	Switch
Performance	Switching capacity: 128 Gbps
Jumbo Frame Support	Yes
Routing Protocol	RIP-1, RIP-2, EIGRP
Remote Management Protocol	SNMP 1, RMON 1, RMON 2, RMON 3, RMON 9, Telnet, SNMP 3, HTTP, HTTPS
Features	DHCP support, VLAN support, QoS, IPv6 support, Syslog
Compliant Standards	IEEE 802.3, IEEE 802.3u, IEEE 802.3z, IEEE 802.1D, IEEE 802.1Q, IEEE 802.3ab, IEEE 802.1p, IEEE 802.3af, IEEE 802.3x, IEEE 802.3ad, IEEE 802.1w, IEEE 802.1x, IEEE 802.1s, IEEE 802.3ah, IEEE 802.1ag, IEEE 802.3at
Stacking	Stackable
Security Features	SSH, RADIUS, TACACS+
Management	CLI
Dimensions (H x W x D)	17.5 in
Operating Temperature	32 to 113 °F (0 to 45 °C)
Humidity	10 - 95% (non-condensing)