Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
534
24
-
Address Prefix Validation
—Is address prefix validation enabled.
-
Global Address Configuration
—Which messages are validated.
-
Max Entries per VLAN
—Maximum number of dynamic Neighbor Binding
table entries per VLAN allowed.
-
Max Entries per Interface
—Maximum number of Neighbor Binding table
entries per interface allowed.
-
Max Entries per MAC Address
—Maximum number of Neighbor Binding
table entries per MAC address allowed.
•
IPv6 Source Guard Status:
-
IPv6 Source Guard State on Current VLAN
—Is IPv6 Source Guard
enabled on the current VLAN.
-
Port Trust
—Whether the port is trusted and how it received its trusted
status.
FHS Statistics
To display FHS statistics:
STEP 1
Click
Security
>
IPv6 First Hop Security
>
FHS Statistics.
STEP 2
Select the
Refresh Rate
, the time period that passes before the statistics are
refreshed.
STEP 3
The following global overflow counters are displayed:
•
Neighbor Binding Table
—Number of entries that could not be added to this
table because the table reached its maximum size.
•
Neighbor Prefix Table
—Number of entries that could not be added to this
table because the table reached its maximum size.
•
TCAM
—Number of entries that could not be added because of TCAM
overflow.
STEP 4
Select an interface and display the following fields are displayed:
•
NDP (Neighbor Discovery Protocol) Messages
—The number of
received
and
dropped
messages are displayed for the following types of messages:
