Purpose
Command or Action
Specifies an interface type and identifier; enters
the interface configuration mode.
interface
Interface_type
stack/module/port
Example:
Switch(config)#
interface gigabitethernet 1/1/4
Step 2
Attaches the DHCP Guard policy to the interface
or the specified VLANs on that interface. The
ipv6 dhcp guard
[
attach-policy policy_name
[
vlan
{
vlan_ids
|
add vlan_ids
|
except vlan_ids
|
none
|
remove vlan_ids
|
all
} ] |
Step 3
default policy is attached if the
attach-policy
option is not used.
vlan
[ {
vlan_id
s |
add vlan_ids
|
exceptvlan_ids
|
none
|
remove
vlan_ids
|
all
} ]
Example:
Switch(config-if)#
ipv6 dhcp guard attach-policy
example_policy
or
Switch(config-if)#
ipv6 dhcp guard attach-policy
example_policy vlan 222,223,224
or
Switch(config-if)#
ipv6 dhcp guard vlan 222, 223,224
Confirms that the policy is attached to the specified
interface without exiting the configuration mode.
do show running-config interface
Interface_type
stack/module/port
Example:
Switch#(config-if)#
do show running-config gig 1/1/4
Step 4
How to Attach an IPv6 DHCP Guard Policy to a Layer 2 EtherChannel Interface
Beginning in privileged EXEC mode, follow these steps to attach an IPv6 DHCP Guard policy on an
EtherChannel interface or VLAN:
SUMMARY STEPS
1.
configure terminal
2.
interface range Interface_name
3.
ipv6 dhcp guard
[
attach-policy policy_name
[
vlan
{
vlan_ids
|
add vlan_ids
|
except vlan_ids
|
none
|
remove vlan_ids
|
all
} ] |
vlan
[ {
vlan_id
s |
add vlan_ids
|
exceptvlan_ids
|
none
|
remove vlan_ids
|
all
} ]
4.
do show running-config interfaceportchannel_interface_name
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
462
OL-29048-01
Configuring IPv6 First Hop Security
How to Attach an IPv6 DHCP Guard Policy to a Layer 2 EtherChannel Interface