Cisco SG350X-24 User Manual

Security: IPv6 First Hop Security
IPv6 First Hop Security Overview
539 Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
25
IPv6 First Hop Security Components
IPv6 First Hop Security includes the following features:
• IPv6 First Hop Security Common
• RA Guard
• ND Inspection
• Neighbor Binding Integrity
• DHCPv6 Guard
• IPv6 Source Guard
These components can be enabled or disabled on VLANs.
There are two empty, pre-defined policies per each feature with the following names:
vlan_default and port_default. The first one is attached to each VLAN that is not attached to a
user-defined policy and the second one is connected to each interface and VLAN that is not
attached to a user-defined policy. These policies cannot be attached explicitly by the user. See
Policies, Global Parameters and System Defaults.
IPv6 First Hop Security Pipe
If IPv6 First Hop Security is enabled on a VLAN, the switch traps the following messages:
• Router Advertisement (RA) messages
• Router Solicitation (RS) messages
• Neighbor Advertisement (NA) messages
NA message Neighbor Advertisement message
NDP Neighbor Discovery Protocol
NS message Neighbor Solicitation message
RA message Router Advertisement message
RS message Router Solicitation message
SAVI Source Address Validation Improvement
Name Description

Cisco SG350X-24 Specifications

General

Model	SG350X-24
Layer	Layer 3
Power Supply	Internal
Rack Mountable	Yes
RAM	512 MB
Flash Memory	256 MB
MAC Address Table	16K entries
Power over Ethernet (PoE)	No
Uplink Ports	4 x 10 Gigabit Ethernet
Jumbo Frame Support	Yes
Power Dedicated to PoE	Not applicable
Dimensions	440 x 44 x 350 mm
Stacking	Yes
Operating Temperature	0°C to 45°C
Storage Temperature	-20°C to 70°C
Relative Humidity	10% to 90% (non-condensing)
Power Consumption	30W (maximum)