security level (IPv6 snooping)
To specify the level of security enforced, use the security-level command in IPv6 snooping policy configuration
mode.
security level {glean | guard | inspect}
Syntax Description
Extracts addresses from the messages and installs them into the binding
table without performing any verification.
glean
Performs both glean and inspect. Additionally, RA and DHCP server
messages are rejected unless they are received on a trusted port or another
policy authorizes them.
guard
Validates messages for consistency and conformance; in particular, address
ownership is enforced. Invalid messages are dropped.
inspect
Command Default
The default security level is guard.
Command Modes
IPv6 snooping configuration
Command History
ModificationRelease
This command was introduced.Cisco IOS XE 3.3SECisco IOS XE 3.3SE
Examples
This example shows how to define an IPv6 snooping policy name as policy1, place the device in IPv6 snooping
configuration mode, and configure the security level as inspect:
Device(config)# ipv6 snooping policy policy1
Device(config-ipv6-snooping)# security-level inspect
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
798
security level (IPv6 snooping)
To Next Page
Loading...
Need help?
General
