Ipv6 Dhcp Guard - Cisco Sx350 Cli Manual

29
621
Command Mode
RA Guard Policy Configuration mode
User Guidelines
If this command is part of a policy attached to a VLAN, it is applied to all the ports
in the VLAN. If it is defined in a policy attached to a port in the VLAN, this value
overrides the value in the policy attached to the VLAN.
Use the disable keyword to disable verification regardless of the global or VLAN
configuration.
Examples
Example 1—The following example defines an RA Guard policy named policy1,
places the switch in RA Guard Policy Configuration mode, and defines a minimum
Cur Hop Limit value of 5:
switchxxxxxx(config)#
switchxxxxxx(config-ra-guard)#
switchxxxxxx(config-ra-guard)#
Example 2—The following example defines an RA Guard policy named policy1,
places the switch in RA Guard Policy Configuration mode, and disables validation
of the Cur Hop Limit high boundary:
switchxxxxxx(config)#
switchxxxxxx(config-ra-guard)# hop-limit maximum disable
switchxxxxxx(config-ra-guard)#

29.13 ipv6 dhcp guard

To enable the DHCPv6 guard feature on a VLAN, use the ipv6 dhcp guard
command in VLAN Configuration mode. To return to the default, use the no form of
this command.
Syntax
ipv6 dhcp guard
ipv6 nd raguard policy policy1
hop-limit minimum 5
exit
ipv6 nd raguard policy policy1
exit
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
IPv6 First Hop Security