Common Tasks - Cisco 500 Series Administration Manual

23

Common Tasks

STEP 1
STEP 2
STEP 3
STEP 4
STEP 1
STEP 2
STEP 3
525
Levels of Verification Rules
The final set of rules that is applied to an input packet on an interface is built in the
following way:
• The rules configured in policies attached to the interface (port or LAG) on
which the packet arrived are added to the set.
• The rules configured in the policy attached to the VLAN are added to the
set if they have not been added at the port level.
• The global rules are added to the set if they have not been added at the
VLAN or port level.
Rules defined at the port level override the rules set at the VLAN level. Rules
defined at the VLAN level override the globally-configured rules. The globally-
configured rules override system defaults.
IPv6 First Hop Security Common Work Flow
In the FHS Settings page, enter the list of VLANs on which this feature is enabled.
In this same page, set the Global Packet Drop Logging feature.
If required, either configure a user-defined policy or add rules to the default
policies for the feature.
Attach the policy to a VLAN, port or LAG using either the Policy Attachment
(VLAN) or Policy Attachment (Port) pages.
Router Advertisement Guard Work Flow
In the RA Guard Settings page, enter the list of VLANs on which this feature is
enabled.
In this same page, set the global configuration values that are used if no values are
set in a policy.
If required, either configure a user-defined policy or add rules to the default
policies for the feature.
Security: IPv6 First Hop Security
Cisco 500 Series Stackable Managed Switch Administration Guide
Common Tasks