Cisco Catalyst 2960-X Security Configuration Manual page 489
Cisco ios release 15.0(2)ex
Hide thumbs
Also See for Catalyst 2960-X:
- Command reference manual (135 pages) ,
- Hardware installation manual (34 pages) ,
- Getting started manual (25 pages)
Table of Contents
Advertisement
Configuring IPv6 First Hop Security
DETAILED STEPS
Command or Action
Step 1
enable
Example:
Switch> enable
Step 2
configure terminal
Example:
Switch# configure terminal
Step 3
[no] ipv6 source-guard policy policy_name
Example:
Switch(config)#
example_policy
Step 4
[deny global-autoconf] [permit link-local]
[default{. . . }] [exit] [no{. . . }]
Example:
Switch(config-sisf-sourceguard)#
global-autoconf
Step 5
end
Example:
Switch(config-sisf-sourceguard)# end
Step 6
show ipv6 source-guard policy policy_name
Example:
Switch# show ipv6 source-guard policy
example_policy
What to Do Next
Apply the IPv6 Source Guard policy to an interface.
OL-29048-01
ipv6 source-guard policy
deny
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
Purpose
Enables privileged EXEC mode. Enter your password if prompted.
Enters the global configuration mode.
Specifies the IPv6 Source Guard policy name and enters IPv6
Source Guard policy configuration mode.
(Optional) Defines the IPv6 Source Guard policy.
• deny global-autoconf—Denies data traffic from
auto-configured global addresses. This is useful when all
global addresses on a link are DHCP-assigned and the
administrator wants to block hosts with self-configured
addresses to send traffic.
• permit link-local—Allows all data traffic that is sourced by
a link-local address.
Trusted option under source guard policy is not
Note
supported.
Exits out of IPv6 Source Guard policy configuration mode.
Shows the policy configuration and all the interfaces where the
policy is applied.
How to Configure IPv6 Source Guard
465
Hide quick links:
Advertisement
Table of Contents
