Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
Cisco 500 Series Stackable Managed Switch Administration Guide
-
User Defined—Verifies that the hop-count limit is less than or equal to
this value. The value of the high boundary must be equal or greater than
the value of the low boundary.
•
Managed Configuration Flag—This field specifies verification of the
advertised Managed Address Configuration flag within an IPv6 RA Guard
policy.
-
No Verification—Disables verification of the advertised Managed
Address Configuration flag.
-
On—Enables verification of the advertised Managed Address
Configuration flag.
-
Off—The value of the flag must be 0.
•
Other Configuration Flag—This field specifies verification of the
advertised Other Configuration flag within an IPv6 RA Guard policy.
-
No Verification—Disables verification of the advertised Other
Configuration flag.
-
On—Enables verification of the advertised Managed Other flag.
-
Off—The value of the flag must be 0.
•
Minimal Router Preference—This field indicates whether the RA Guard
policy will verify the minimum advertised Default Router Preference value in
RA messages within an RA Guard policy.
-
No Verification—Disables verification of the low boundary of
Advertised Default Router Preference.
-
Low—Specifies the minimum allowed Advertised Default Router
Preference value. The following values are acceptable: low, medium and
high (see RFC4191).
-
Medium—Specifies the minimum allowed Advertised Default Router
Preference value. The following values are acceptable: low, medium and
high (see RFC4191).
-
High—Specifies the minimum allowed Advertised Default Router
Preference value. The following values are acceptable: low, medium and
high (see RFC4191).
•
Maximal Router Preference—This field indicates whether the RA Guard
policy will verify the maximum advertised Default Router Preference value
in RA messages within an RA Guard policy.
23
530