Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
532
24
•
IPv6 Prefix
—IPv6 prefix.
•
Prefix Length
—IPv6 prefix length.
•
Origin
—Entry is dynamic (learned) or static (manually configured).
•
Autoconfig
—The prefix can be used for stateless configuration.
•
Expiry Time (Sec)
—Length of time entry will remain before being deleted.
STEP 4
Click
Add
to add a new entry to the table and enter the above fields for the new
entry.
FHS Status
To display the global configuration for the FHS features:
STEP 1
Click
Security
>
IPv6 First Hop Security
>
FHS Status.
STEP 2
Select a port, LAG or VLAN for which the FHS state is reported.
STEP 3
The following fields are displayed for the selected interface:
•
FHS Status
-
FHS State on Current VLAN:
—Is FHS enabled on the current VLAN.
-
Packet Drop Logging:
—Is this feature enabled for the current interface
(at the level of global configuration or in a policy attached to the
interface).
•
RA Guard Status
-
RA Guard State on Current VLAN
—Is RA Guard enabled on the current
VLAN.
-
Device Role:
—RA device role.
-
Managed Configuration Flag
—Is verification of the managed
configuration flag enabled.
-
Other Configuration Flag
—Is verification of the other configuration flag
enabled.
-
RA Address List
—RA address list to be matched.
