Table of Contents
Advertisement
IPv6 First Hop Security
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
IPv6 First Hop Security Policy:
logging packet drop: enabled (from global configuration)
DHCPv6 Guard Policy:
device-role: server (from policy1 attached to the port)
reply prefix list name: list10 (from policy2 attached to the VLAN)
server address prefix list name: list22 (from policy2 attached to the VLAN)
preference
minimum: 1 (from policy2 attached to the VLAN)
maximum: 200 (from policy2 attached to the VLAN)
ND Inspection Policy:
device-role: host (default)
drop-unsecure: enabled (from policy2 attached to the VLAN)
sec-level minimum: 3 (from policy1 attached to the port)
validate source-mac: enabled (from global configuration)
Neighbor Binding Policy: policy1
device-role: perimiter (default)
logging binding: enabled (from policy1 attached to the port)
address-prefix-validation: enabled (from policy2 attached to the VLAN)
address-config: any (default)
maximum entries
VLAN: unlimited (from global configuration)
Port: 1 (from policy1 attached to the port)
MAC: 2 (from policy2 attached to the VLAN)
RA Guard Policy:
device-role: router (from policy1 attached to the port)
hop-limit:
minimum: 10 (from policy2 attached to the VLAN)
maximum: 20 (from global configuration)
manage-config-flag: on(from policy2 attached to the VLAN)
ra address verification::
ra prefixes prefix list name: list1(from policy2 attached to the VLAN)
disabled(default)
29
698
Advertisement
Table of Contents
