Displaying IPv6 RA Guard Statistics 364
Displaying DHCP Snooping Bindings 364
Clearing the DHCP Snooping Binding Database 365
Monitoring DHCP 365
Clearing DHCP Snooping Statistics 365
Clearing DHCP Relay Statistics 365
Clearing DHCPv6 Relay Statistics 365
Configuration Examples for DHCP 366
Configuration Examples for DHCP Client 366
Additional References for DHCP 367
Configuring IPv6 First Hop Security 369
CHAPTER 15
Introduction to First-Hop Security 369
IPv6 Global Policies 370
IPv6 First-Hop Security Binding Table 370
Guidelines and Limitations of First Hop Security 370
About vPC First Hop Security Configuration 371
DHCP Relay On-stack 371
DHCP Relay on VPC Leg 372
DHCP Client Relay on Orphan Ports 373
RA Guard 374
Overview of IPv6 RA Guard 374
Guidelines and Limitations of IPv6 RA Guard 375
DHCPv6 Guard 375
Overview of DHCP—DHCPv6 Guard 375
Limitation of DHCPv6 Guard 375
IPv6 Snooping 376
Overview of IPv6 Snooping 376
Guidelines and Limitations for IPv6 Snooping 376
How to Configure IPv6 FHS 377
Configuring the IPv6 RA Guard Policy on the Device 377
Configuring IPv6 RA Guard on an Interface 378
Configuring DHCP—DHCPv6 Guard 380
Configuring IPv6 Snooping 382
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
xvii
Contents