Cisco Catalyst 3560-X Series, Software Configuration Manual

Page: 1176 / 1538

1-22
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
OL-25303-03
Chapter 1 Configuring IPv6 Unicast Routing
Configuring IPv6
Configuring IPv6 Source Guard
Configuration Examples for Implementing First Hop Security in IPv6
This example shows you how to attach a snooping policy to a VLAN and to configure an RA trusted
router port and DHCP trusted server port:
Switch(config)# vlan configuration 100
Switch(config-vlan-config)#
ipv6 snooping
Switch(config-vlan-config)# exit
Switch(config)#
ipv6 nd raguard policy router
Switch(config-nd-raguard)# device-role router
Switch(config-nd-raguard)# exit
Switch(config)# ipv6 dhcp guard policy server
Switch(config-dhcp-guard)# device-role server
Switch(config-dhcp-guard)#
exit
Step 5
exit Exits the DHCP guard policy global configuration mode.
Step 6
interface type number Specifies an interface type and number and enters the interface
configuration mode.
Step 7 ipv6 dhcp guard attach-policy
policy-name
Or
vlan configuration vlan-id
Attaches the DHCP guard policy to an interface or VLAN.
Step 8 show ipv6 dhcp guard policy
policy-name
Displays the DHCP guard policy configuration.
Action or Command Purpose
Step 1 enable Enables privileged EXEC mode. Enter your password if prompted.
Step 2 configure terminal Enters the global configuration mode.
Step 3 ipv6 source-guard policy policy-name Specifies the source guard policy name and enters the source guard policy
configuration mode.
Step 4
permit link-local Allows all data traffic that is sourced by a link-local address.
Step 5 deny global-autoconf Denies data traffic from auto-configured global addresses. This is useful
when all global addresses on a link are DHCP-assigned and the
administrator wants to block hosts with self-configured addresses to send
traffic.
Step 6 ipv6 source-guard [ attach-policy
policy-name ]
Specifies the policy name.
(Optional) attach-policy policy-name —Filters based on the policy name
Step 7 exit Exits the source guard policy configuration mode.
Step 8 show ipv6 source-guard policy policy
name
Shows the policy configuration and all the interfaces where the policy is
applied.
Action or Command Purpose