Cisco 350 Series Administration Manual page 603

Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
STEP 6
STEP 7
STEP 1
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
- Inherited—Minimal preference is inherited from either the VLAN or system default
(client).
- No Verification—Disables verification of the minimum advertised preference value
of the packet received.
- User Defined—Verifies that the advertised preference value is greater than or equal
to this value. This value must be less than the Maximal Preference value.
• Maximal Preference—This field indicates whether the DHCPv6 Guard policy will
check the maximum advertised preference value of the packet received. This value must
be greater than the Minimal Preference value.
- Inherited—Minimal preference is inherited from either the VLAN or system default
(client).
- No Verification—Disables verification of the lower boundary of the hop count limit.
- User Defined—Verifies that the advertised preference value is less than or equal to
this value.
Click Apply to add the settings to the Running Configuration file.
To attach this policy to an interface:
• Attach Policy to VLAN—Click to jump to
you can attach this policy to a VLAN.
• Attach Policy to Interface—Click to jump to
can attach this policy to a port.
ND Inspection Settings
Use the Neighbor Discovery (ND) Inspection Settings page to enable the ND Inspection
feature on a specified group of VLANs and to set the global configuration values for this
feature. If required, a policy can be added or the system-defined default ND Inspection
policies can be configured in this page.
To configure ND Inspection:
Click Security > IPv6 First Hop Security > ND Inspection Settings.
The existing policies are displayed. The fields are displayed below except for the Policy Type
field. This displays whether the policy is user-defined or a default one.
Policy Attachment (VLAN)
Policy Attachment (Port)
26
page where
page where you
462