How To Configure An Ipv6 Dhcp Guard Policy - Cisco Catalyst 2960-XR Security Configuration Manual

How to Configure an IPv6 DHCP Guard Policy

Command or Action
Step 3
ipv6 dhcp guard [attach-policy policy_name]
Example:
Switch(config-vlan-config)#ipv6 nd raguard
attach-policy example_policy
Step 4
do show running-config
Example:
Switch#(config-if)#
How to Configure an IPv6 DHCP Guard Policy
Beginning in privileged EXEC mode, follow these steps to configure an IPv6 DHCP Guard policy:
SUMMARY STEPS
1. configure terminal
2. [no]ipv6 dhcp guard policy policy-name
3. device-role {client | server}
4. trusted-port
5. default {device-role | trusted-port}
6. no {device-role | trusted-port}
7. do show ipv6 dhcp guard policy policy_name
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
Switch# configure terminal
Step 2 [no]ipv6 dhcp guard policy policy-name
Example:
Switch(config)# ipv6 dhcp guard policy
example_policy
Step 3 device-role {client | server}
Example:
Switch(config-dhcp-guard)# device-role server
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
366
do show running-config
Purpose
Enters the global configuration mode.
Specifies the DHCP Guard policy name and enters DHCP Guard
Policy configuration mode.
(Optional) device-role [client | server]—Specifies the role of
the device attached to the port.
Purpose
Attaches the IPv6 RA Guard policy to the specified VLANs
across all switch and stack interfaces. The default policy is
attached if the attach-policy option is not used.
Confirms that the policy is attached to the specified VLANs
without exiting the configuration mode.
• client—Default value, specifies that the attached device
is a client. Server messages are dropped on this port.
Configuring IPv6 First Hop Security
OL-29434-01