Cisco Sx350

IPv6 First Hop Security
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide 648
29
Examples
Example 1—The following example enables RA Guard on VLAN 100:
switchxxxxxx(config)# interface vlan 100
switchxxxxxx(config-if)# ipv6 nd raguard
switchxxxxxx(config-if)# exit
Example 2—The following example enables RA Guard on VLANs 100-107:
switchxxxxxx(config)# interface range vlan 100-107
switchxxxxxx(config-if-range)# ipv6 nd raguard
switchxxxxxx(config-if-range)# exit
29.31 ipv6 nd raguard attach-policy (port
mode)
To attach an RA Guard policy to a specific port, use the ipv6 nd raguard
attach-policy command in Interface Configuration mode. To return to the default,
use the no form of this command.
Syntax
ipv6 nd raguard attach-policy
policy-name [vlan vlan-list ]
no ipv6 nd raguard attach-policy [
policy-name ]
Parameters
• policy-name —The RA Guard policy name (up to 32 characters).
• vlan vlan-list —Specifies that the RA Guard policy is to be attached to the
VLAN(s) in
vlan-list . If the vlan keyword is not configured, the policy is
applied to all VLANs on the device on which RA Guard policy is enabled.
Default Configuration
The RA Guard default policy is applied.