Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4 462
26
- Inherited—Minimal preference is inherited from either the VLAN or system default
(client).
- No Verification—Disables verification of the minimum advertised preference value
of the packet received.
- User Defined—Verifies that the advertised preference value is greater than or equal
to this value. This value must be less than the Maximal Preference value.
• Maximal Preference—This field indicates whether the DHCPv6 Guard policy will
check the maximum advertised preference value of the packet received. This value must
be greater than the Minimal Preference value.
- Inherited—Minimal preference is inherited from either the VLAN or system default
(client).
- No Verification—Disables verification of the lower boundary of the hop count limit.
- User Defined—Verifies that the advertised preference value is less than or equal to
this value.
STEP 6 Click Apply to add the settings to the Running Configuration file.
STEP 7 To attach this policy to an interface:
• Attach Policy to VLAN—Click to jump to Policy Attachment (VLAN) page where
you can attach this policy to a VLAN.
• Attach Policy to Interface—Click to jump to Policy Attachment (Port) page where you
can attach this policy to a port.
ND Inspection Settings
Use the Neighbor Discovery (ND) Inspection Settings page to enable the ND Inspection
feature on a specified group of VLANs and to set the global configuration values for this
feature. If required, a policy can be added or the system-defined default ND Inspection
policies can be configured in this page.
To configure ND Inspection:
STEP 1 Click Security > IPv6 First Hop Security > ND Inspection Settings.
The existing policies are displayed. The fields are displayed below except for the Policy Type
field. This displays whether the policy is user-defined or a default one.
To Next Page
Loading...
