Cisco 350XG series Administration Manual page 540

Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
STEP 4
STEP 5
STEP 1
STEP 2
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
- Medium—Specifies the maximum allowed Advertised Default Router
Preference value. The following values are acceptable: low, medium and
high (see RFC4191).
- High—Specifies the maximum allowed Advertised Default Router
Preference value. The following values are acceptable: low, medium and
high (see RFC4191).
To configure system-defined default policies or existing user defined policy select
the policy in the policy table and click Edit.
To attach this policy to an interface:
• Attach Policy to VLAN—Click to jump to
where you can attach this policy to a VLAN.
• Attach Policy to Interface—Click to jump to
page where you can attach this policy to a port.
DHCPv6 Guard Settings
Use the DHCPv6 Guard Settings page to enable the DHCPv6 Guard feature on a
specified group of VLANs and to set the global configuration values for this
feature. If required, a policy can be added or the system-defined default DHCPv6
Guard policies can be configured in this page.
To configure DHCPv6 Guard:
Click Security > IPv6 First Hop Security > DHCPv6 Guard Settings.
Enter the following global configuration fields:
• DHCPv6 Guard VLAN List—Enter one or more VLANs on which DHCPv6
Guard is enabled.
• Device Role—Displays the device role. See definition in the Add page.
• Minimal Preference—This field indicates whether the DHCPv6 Guard
policy will check the minimum advertised preference value of the packet
received.
- No Verification—Disables verification of the minimum advertised
preference value of the packet received.
Policy Attachment (VLAN)
Policy Attachment (Port)
24
page
521