Cisco SX350 Series Administration Manual page 580

Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
STEP 1
STEP 2
STEP 3
STEP 4
STEP 5
STEP 6
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
• Attach Policy to VLAN—Click to jump to
you can attach this policy to a VLAN.
• Attach Policy to Interface—Click to jump to
can attach this policy to a port.
IPv6 Source Guard Settings
Use the IPv6 Source Guard Settings page to enable the IPv6 Source Guard feature on a
specified group of VLANs. If required, a policy can be added or the system-defined default
IPv6 Source Guard policies can be configured in this page.
To configure IPv6 Source Guard:
Click Security > IPv6 First Hop Security > IPv6 Source Guard Settings.
The existing policies are displayed. The fields are displayed below except for the Policy Type
field. This displays whether the policy is user-defined or a default one.
Enter the following global configuration fields:
• IPv6 Source Guard VLAN List—Enter one or more VLANs on which IPv6 Source
Guard is enabled.
• Port Trust—Displays that by default the policies are for untrusted ports. This can be
changed per policy.
If required, click Add to create a First Hop Security policy.
Enter the following fields:
• Policy Name—Enter a user-defined policy name.
• Port Trust—Select the port trust status of the policy:
- Inherited—When policy is attached to a port it is untrusted).
- Trusted—When policy is attached to a port it is trusted.
Click Apply to attach the policy.
To attach this policy to an interface click Attach Policy to Interface, which takes you to the
Policy Attachment (Port) page where you can attach this policy to a port.
Policy Attachment (VLAN)
Policy Attachment (Port)
25
page where
page where you
564