Cisco Sx350

IPv6 First Hop Security
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide 640
29
Use the no ipv6 nd inspection attach-policy command to detach all user-defined
policies attached to the port.
Use the no ipv6 nd inspection attach-policy
policy-name command to detach the
specific policy from the port.
Examples
Example 1—In the following example, the ND Inspection policy policy1 is attached
to the gi11 port:
switchxxxxxx(config)# interface gi11
switchxxxxxx(config-if)# ipv6 nd inspection attach-policy policy1
switchxxxxxx(config-if)# exit
Example 2—In the following example, the ND Inspection policy policy1 is attached
to the gi11 port and applied to VLANs 1-10 and 12-20:
switchxxxxxx(config)# interface gi11
switchxxxxxx(config-if)# ipv6 nd inspection attach-policy policy1 vlan
1-10,12-20
switchxxxxxx(config-if)# exit
Example 3—In the following example, the ND Inspection policy policy1 is attached
to the gi11 port and applied to VLANs 1-10 and the ND Inspection policy policy2 is
attached to the gi11 port and applied to VLANs 12-20:
switchxxxxxx(config)# interface gi11
switchxxxxxx(config-if)# ipv6 nd inspection attach-policy policy1 vlan 1-10
switchxxxxxx(config-if)# ipv6 nd inspection attach-policy policy2 vlan 12-20
switchxxxxxx(config-if)# exit
Example 4—In the following example, ND Inspection detaches policy policy1 from
the gi11 port:
switchxxxxxx(config)# interface gi11