Cisco Catalyst 2960 Series, Configuration Manual, Page: 784 / 2288

Purpose Command or Action
(Optional) default — Sets a command to its defaults. default { device-role | trusted-port }
Example:
Switch(config-dhcp-guard)# default
device-role
Step 8
(Optional) Displays the configuration of the IPv6 DHCP guard
policy without leaving the configuration submode. Omitting the
policy_name variable displays all DHCPv6 policies.
do show ipv6 dhcp guard policy policy_name
Example:
Switch(config-dhcp-guard)# do show ipv6 dhcp
guard policy example_policy
Step 9
Example of DHCPv6 Guard Configuration
enable
configure terminal
ipv6 access-list acl1
permit host FE80::A8BB:CCFF:FE01:F700 any
ipv6 prefix-list abc permit 2001:0DB8::/64 le 128
ipv6 dhcp guard policy pol1
device-role server
match server access-list acl1
match reply prefix-list abc
preference min 0
preference max 255
trusted-port
interface GigabitEthernet 0/2/0
switchport
ipv6 dhcp guard attach-policy pol1 vlan add 1
vlan 1
ipv6 dhcp guard attach-policy pol1
show ipv6 dhcp guard policy pol1
Related Topics
Information about First Hop Security in IPv6, on page 678
How to Attach an IPv6 DHCP Guard Policy to an Interface or a VLAN on an Interface
Beginning in privileged EXEC mode, follow these steps to configure IPv6 Binding Table Content :
SUMMARY STEPS
1.
configure terminal
2. interface Interface_type stack/module/port
3.
ipv6 dhcp guard [ attach-policy policy_name [ vlan { vlan_ids | add vlan_ids | except vlan_ids | none |
remove vlan_ids | all } ] | vlan [ { vlan_id s | add vlan_ids | exceptvlan_ids | none | remove vlan_ids |
all } ]
4.
do show running-config interface Interface_type stack/module/port
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
702
How to Configure an IPv6 DHCP Guard Policy