Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 564
25
• Attach Policy to VLAN—Click to jump to Policy Attachment (VLAN) page where
you can attach this policy to a VLAN.
• Attach Policy to Interface—Click to jump to Policy Attachment (Port) page where you
can attach this policy to a port.
IPv6 Source Guard Settings
Use the IPv6 Source Guard Settings page to enable the IPv6 Source Guard feature on a
specified group of VLANs. If required, a policy can be added or the system-defined default
IPv6 Source Guard policies can be configured in this page.
To configure IPv6 Source Guard:
STEP 1 Click Security > IPv6 First Hop Security > IPv6 Source Guard Settings.
The existing policies are displayed. The fields are displayed below except for the Policy Type
field. This displays whether the policy is user-defined or a default one.
STEP 2 Enter the following global configuration fields:
• IPv6 Source Guard VLAN List—Enter one or more VLANs on which IPv6 Source
Guard is enabled.
• Port Trust—Displays that by default the policies are for untrusted ports. This can be
changed per policy.
STEP 3 If required, click Add to create a First Hop Security policy.
STEP 4 Enter the following fields:
• Policy Name—Enter a user-defined policy name.
• Port Trust—Select the port trust status of the policy:
- Inherited—When policy is attached to a port it is untrusted).
- Trusted—When policy is attached to a port it is trusted.
STEP 5 Click Apply to attach the policy.
STEP 6 To attach this policy to an interface click Attach Policy to Interface, which takes you to the
Policy Attachment (Port) page where you can attach this policy to a port.
To Next Page
Loading...
