DETAILED STEPS
Purpose
Command or Action
Enters the global configuration mode.
configure terminal
Example:
Switch#
configure terminal
Step 1
Specify the port-channel interface name assigned when
the EtherChannel was created. Enters the interface range
configuration mode.
interface range Interface_name
Example:
Switch(config)#
interface Po11
Step 2
Enter the
do show interfaces summary
command for quick reference to interface names
and types.
Tip
Attaches the DHCP Guard policy to the interface or the
specified VLANs on that interface. The default policy is
attached if the
attach-policy
option is not used.
ipv6 dhcp guard
[
attach-policy policy_name
[
vlan
{
vlan_ids
|
add vlan_ids
|
except vlan_ids
|
none
|
remove vlan_ids
|
all
} ] |
vlan
[ {
vlan_id
s |
add vlan_ids
|
exceptvlan_ids
|
none
|
remove vlan_ids
|
all
} ]
Step 3
Example:
Switch(config-if-range)#
ipv6 dhcp guard
attach-policy example_policy
or
Switch(config-if-range)#
ipv6 dhcp guard
attach-policy example_policy vlan 222,223,224
or
Switch(config-if-range)#
ipv6 dhcp guard vlan 222,
223,224
Confirms that the policy is attached to the specified
interface without exiting the configuration mode.
do show running-config interfaceportchannel_interface_name
Example:
Switch#(config-if-range)#
do show running-config
int po11
Step 4
How to Attach an IPv6 DHCP Guard Policy to VLANs Globally
Beginning in privileged EXEC mode, follow these steps to attach an IPv6 DHCP Guard policy to VLANs
across multiple interfaces:
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01
463
Configuring IPv6 First Hop Security
How to Attach an IPv6 DHCP Guard Policy to VLANs Globally