Cisco 300 Series Cli Manual page 526

IPv6 First Hop Security
OL-32830-01 Command Line Interface Reference Guide
Command Mode
Interface (Ethernet, Port Channel) Configuration mode
User Guidelines
Use this command to attach an RA Guard policy to a port.
Each time the command is used, it overrides the previous command within the
same policy.
If a policy specified by the
rejected.
Multiple policies with the vlan keyword can be attached to the same port if they
do not have common VLANs.
The set of rules that is applied to an input packet is built in the following way:
•
The rules, configured in the policy attached to the port on the VLAN on
which the packet arrived are added to the set.
•
The rules, configured in the policy attached to the VLAN are added to the
set if they have not been added.
•
The global rules are added to the set if they have not been added.
Use the no ipv6 nd raguard attach-policy command to detach all user-defined
policies attached to the port.
Use the no ipv6 nd raguard attach-policy
specific policy from the port.
Examples
Example 1—In the following example, the RA Guard policy policy1 is attached to
the gi 1 1 port:
switchxxxxxx(config)#
switchxxxxxx(config-if)#
switchxxxxxx(config-if)#
Example 2—In the following example, the RA Guard policy policy1 is attached to
the gi 1 1 port and applied to VLANs 1-10 and 12-20:
switchxxxxxx(config)#
policy-name
argument is not defined, the command is
policy-name
interface gi11
ipv6 nd raguard attach-policy policy1
exit
interface gi11
25
command to detach the
526