Ipv6 First Hop Security Overview - Cisco 500 Series Administration Manual

Security: IPv6 First Hop Security

IPv6 First Hop Security Overview

IPv6 First Hop Security Overview
Cisco 500 Series Stackable Managed Switch Administration Guide
IPv6 FHS is a suite of features designed to secure link operations in an IPv6-
enabled network. It is based on the Neighbor Discovery Protocol and DHCPv6
messages.
In this feature, a Layer 2 switch (as shown in
Protocol messages, DHCPv6 messages and user data messages according to a
number of different rules.
Figure 8 IPv6 First Hop Security Configuration
A separate and independent instance of IPv6 First Hop Security runs on each
VLAN on which the feature is enabled.
Abbreviations
Name
CPA message
CPS message
DAD-NS message
FCFS-SAVI
Figure
Description
Certification Path Advertisement message
Certification Path Solicitation message
Duplicate Address Detection Neighbor
Solicitation message
First Come First Served - Source Address
Validation Improvement
8) filters Neighbor Discovery
23
512