Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
526
24
To configure Neighbor Binding:
STEP 1
Click
Security
>
IPv6 First Hop Security
>
Neighbor Binding Settings
.
STEP 2
Enter the following global configuration fields:
•
Neighbor Binding VLAN List
—Enter one or more VLANs on which Neighbor
Binding is enabled.
•
Device Role
—Displays the device global default role (Perimeter).
•
Neighbor Binding Lifetime
—Enter the length of time that addresses remain
in the Neighbor Bindings table.
•
Neighbor Binding Logging
—Select to enable logging of Neighbor Binding
table main events.
•
Address Prefix Validation
—Select to enable IPv6 Source Guard validation
of addresses.
Global Address Binding Configuration
:
•
Binding from NDP Messages
—To change the global configuration of
allowed configuration methods of global IPv6 addresses within an IPv6
Neighbor Binding policy, select one of the following options:
-
Any
—Any configuration methods (stateless and manual) are allowed for
global IPv6 bound from NDP messages
-
Stateless
—Only stateless auto configuration is allowed for global IPv6
bound from NDP messages.
-
Disable
—Binding from NDP messages is disabled.
•
Binding from DHCPv6 Messages
—Binding from DHCPv6 is allowed.
Neighbor Binding Entry Limits
—Specify the maximum number of Neighbor
Binding entries per type of interface or address:
•
Entries Per VLAN
—Specifies the neighbor binding limit per VLAN. Select
either No Limit or enter a User Defined value.
•
Entries Per Interface
—Specifies the neighbor binding limit per interface.
Select either No Limit or enter a User Defined value.
•
Entries Per MAC Address
—Specifies the neighbor binding limit per MAC
address. Select either
No Limit
or enter a
User Defined
value.
STEP 3
If required, click
Add
to create a Neighbor Binding policy.
