Cisco Sx350, Руководство CLI

Страница: 629 / 1323

IPv6 First Hop Security
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide 628
29
Example 2—The following example defines a DHCPv6 Guard named policy1 by
multiple steps:
switchxxxxxx(config)# ipv6 dhcp guard policy policy1
switchxxxxxx(config-dhcp-guard)# match server address list1
switchxxxxxx(config-dhcp-guard)# exit
switchxxxxxx(config)# ipv6 dhcp guard policy policy1
switchxxxxxx(config-dhcp-guard)# device-role server
switchxxxxxx(config-dhcp-guard)# exit
Example 3—The following example removes an attached DHCPv6 Guard policy:
switchxxxxxx(config)#
no ipv6 dhcp guard policy policy1
Policy policy1 is applied on the following ports:
gi11, gi12
The policy1 will be detached and removed, are you sure [Y/N]Y
29.17 ipv6 dhcp guard preference
To globally enable verification of the preference in messages sent by DHCPv6
servers, use the ipv6 dhcp guard preference command in Global Configuration
mode. To return to the default, use the no form of this command.
Syntax
ipv6 dhcp guard preference {[maximum
value
] [minimum
value
]}
no ipv6 dhcp guard preference [maximum] [minimum]
Parameters
•
maximum value —Advertised preference value is lower than or equal to the
value argument. Range 0-255. The value of the high boundary must be
equal to or greater than the value of the low boundary.
•
minimum
value
—Advertised preference value is greater than or equal to the
value argument. Range 0-255.