Cisco Sx350

IPv6 First Hop Security
617 Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
29
no device-role
Parameters
• host—Sets the role of the device to host.
• router—Sets the role of the device to router.
Default Configuration
Policy attached to port or port channel: the value configured in the policy attached
to the VLAN.
Policy attached to VLAN: host.
Command Mode
ND inspection Policy Configuration mode
User Guidelines
If this command is part of a policy attached to a VLAN, it is applied to all the ports
in the VLAN. If it is defined in a policy attached to a port in the VLAN, this value
overrides the value in the policy attached to the VLAN.
ND Inspection performs egress filtering of NDP messages depending on a port
role.The following table specifies the filtering rules.
Example
The following example defines an ND Inspection policy named policy 1 and
configures the port role as router:
switchxxxxxx(config)# ipv6 nd inspection policy policy1
switchxxxxxx(config-nd-inspection)# device-role router
switchxxxxxx(config-nd-inspection)# exit
Message Host Router
RA Permit Permit
RS Deny Permit
CPA Permit Permit
CPS Deny Permit
ICMP Redirect Permit Permit