Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
566
25
Neighbor Binding Table
To view entries in the Neighbor Binding table:
STEP 1
Click
Security
>
IPv6 First Hop Security
>
Neighbor Binding Table
STEP 2
Select one of the following clear table options:
•
Static Only
—Clear all static entries in the table.
•
Dynamic Only
—Clear all dynamic entries in the table.
•
All Dynamic & Static
—Clear all dynamic and static entries in the table.
The following fields are displayed for each policy (only fields not on Add page are displayed:
•
Origin
—Protocol that added the IPv6 address (only available for dynamic entries):
-
Static
—Added manually.
-
NDP
—Learnt from Neighbor Discovery Protocol messages.
-
DHCP
—Learnt from DHCPv6 protocol messages.
•
State
—State of the entry:
-
Tentative
—The new host IPv6 address is under validation. Since its lifetime is less
than 1 sec its expiration time is not displayed.
-
Valid
—The host IPv6 address was bound.
•
Expiry Time (Sec.)
—Remaining time in seconds until the entry will be removed, if it
is not confirmed.
•
TCAM Overflow
—Entries marked as
No
have not been added to the TCAM because
TCAM overflow
STEP 3
To add a policy, click
Add
and enter the following fields:
•
VLAN ID
—VLAN ID of the entry.
•
IPv6 Address
—Source IPv6 address of the entry.
•
Interface
— Port on which packet is received.
•
MAC Address
— Neighbor MAC address of the packet.
STEP 4
Click
Apply
to add the settings to the Running Configuration file.
