IPv6 First Hop Security
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
Use the no ipv6 nd inspection attach-policy command to detach all user-defined
policies attached to the port.
Use the no ipv6 nd inspection attach-policy
specific policy from the port.
Examples
Example 1—In the following example, the ND Inspection policy policy1 is attached
to the gi11 port:
switchxxxxxx(config)#
switchxxxxxx(config-if)#
switchxxxxxx(config-if)#
Example 2—In the following example, the ND Inspection policy policy1 is attached
to the gi11 port and applied to VLANs 1-10 and 12-20:
switchxxxxxx(config)#
switchxxxxxx(config-if)#
1-10,12-20
switchxxxxxx(config-if)#
Example 3—In the following example, the ND Inspection policy policy1 is attached
to the gi11 port and applied to VLANs 1-10 and the ND Inspection policy policy2 is
attached to the gi11 port and applied to VLANs 12-20:
switchxxxxxx(config)#
switchxxxxxx(config-if)#
switchxxxxxx(config-if)#
switchxxxxxx(config-if)#
Example 4—In the following example, ND Inspection detaches policy policy1 from
the gi11 port:
switchxxxxxx(config)#
policy-name
interface gi11
ipv6 nd inspection attach-policy policy1
exit
interface gi11
ipv6 nd inspection attach-policy policy1 vlan
exit
interface gi11
ipv6 nd inspection attach-policy policy1 vlan 1-10
ipv6 nd inspection attach-policy policy2 vlan 12-20
exit
interface gi11
29
command to detach the
640