IPv6 First Hop Security
OL-32830-01 Command Line Interface Reference Guide
564
25
addresses to the prefix list named list1, and defines the prefix list named list1
authorizing the server with link-local address FE80::A8BB:CCFF:FE01:F700 only:
switchxxxxxx(config)#
ipv6 dhcp guard policy
policy1
switchxxxxxx(config-dhcp-guard)#
match server address prefix-list
list1
switchxxxxxx(config-dhcp-guard)#
exit
switchxxxxxx(config)#
ipv6 prefix-list
list1
permit
FE80::A8BB:CCFF:FE01:F700/128
25.59 max-entries
To define the maximum number of dynamic entries that can be inserted in the
Binding table cache within an IPv6 Neighbor Binding policy, use the max-entries
command in Neighbor Binding Policy Configuration mode.To return to the default,
use the no form of this command.
Syntax
max-entries {[vlan-limit {
number
| disable}] [interface-limit {
number
| disable}]
[mac-limit {
number
| disable}]}
no max-entries [vlan-limit] [interface-limit] [mac-limit]
Parameters
•
vlan-limit
number
—Specifies a neighbor binding limit per VLANs. The
parameter is ignored in a policy attached to port.
•
vlan-limit disable—Disables a neighbor binding limit per VLANs.
•
interface-limit
number
—Specifies a neighbor binding limit per port.
•
interface-limit disable—Disables a neighbor binding limit per port.
•
mac-limit
number
—Specifies a neighbor binding limit per MAC address.
•
mac-limit disable—Disables a neighbor binding limit per MAC address.
Default Configuration
Policy attached to port or port channel: the value configured in the policy attached
to the VLAN.
Policy attached to VLAN: global configuration.
Summary of Contents for 300 Series
Page 2: ......