Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
563
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
25
•
Neighbor Binding Logging
—Select one of the following options to specify logging:
-
Inherited
—Logging option is the same as the global value.
-
Enable
—Enable logging of Binding table main events.
-
Disable
—Disable logging of Binding table main events.
•
Address Prefix Validation
—Select one of the following options to specify validation
of addresses:
-
Inherited
—Validation option is the same as the global value.
-
Enable
—Enable validation of addresses.
-
Disable
—Disable validation of addresses
Global Address Binding Configuration
:
•
Inherit Address Binding Settings
—Enable to use the global address binding settings.
•
Binding from NDP Messages
—To change the global configuration of allowed
configuration methods of global IPv6 addresses within an IPv6 Neighbor Binding
policy, select one of the following options:
-
Any
—Any configuration methods (stateless and manual) are allowed for global
IPv6 bound from NDP messages
-
Stateless
—Only stateless auto configuration is allowed for global IPv6 bound from
NDP messages.
-
Disable
—Binding from NDP messages is disabled.
•
Binding from DHCPv6 Messages
—Select to enable binding from DHCPv6.
Neighbor Binding Entry Limits
—
See above.
•
Entries per VLAN
—Select
Inherited
to use global value,
No Limit
to set no limit on
the number of entries and
User Defined
to set a special value for this policy.
•
Entries per Interface
—Select
Inherited
to use global value,
No Limit
to set no limit
on the number of entries and
User Defined
to set a special value for this policy.
•
Entries per MAC Address
—Select
Inherited
to use global value,
No Limit
to set no
limit on the number of entries and
User Defined
to set a special value for this policy.
STEP 5
Click
Apply
to add the settings to the Running Configuration file.
STEP 6
To attach this policy to an interface:
