Security: IPV6 First Hop Security
First Hop Security Overview
First Hop Security Overview
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)
IPv6 FHS is a suite of features designed to secure link operations in an IPv6-
enabled network. It is based on the Neighbor Discovery Protocol and DHCPv6
messages.
In this feature, a Layer 2 switch (as shown in
Protocol messages, DHCPv6 messages and user data messages according to a
number of different rules.
Figure 6 First Hop Security Configuration
A separate and independent instance of IPv6 First Hop Security runs on each
VLAN on which the feature is enabled.
Abbreviations
Name
CPA message
CPS message
DAD-NS message
FCFS-SAVI
Figure
Description
Certification Path Advertisement message
Certification Path Solicitation message
Duplicate Address Detection Neighbor
Solicitation message
First Come First Served - Source Address
Validation Improvement
6) filters Neighbor Discovery
20
411