Configuring Ipv6 First Hop Security Through Web Gui - Cisco 500 Series Administration Manual

Security: IPv6 First Hop Security

Configuring IPv6 First Hop Security through Web GUI

Configuring IPv6 First Hop Security through Web GUI
STEP 1
STEP 2
STEP 3
STEP 4
Cisco 500 Series Stackable Managed Switch Administration Guide
FHS Common Settings
Use the FHS Settings page to enable the FHS Common feature on a specified
group of VLANs and to set the global configuration value for logging of dropped
packets. If required, a policy can be added or the packet drop logging can be
added to the system-defined default policy.
To configure IPv6 First Hop Security common parameters:
Click Security > IPv6 First Hop Security > FHS Settings.
The currently-defined polices are displayed.
Enter the following global configuration fields:
• FHS VLAN List—Enter one or more VLANs on which IPv6 First Hop
Security is enabled.
• Packet Drop Logging—Select to create a SYSLOG when a packet is
dropped by a First Hop Security policy. This is the global default value if no
policy is defined.
Click Apply to add the settings to the Running Configuration file.
Create a FHS policy if required by clicking Add.
Enter the following fields:
• Policy Name—Enter a user-defined policy name.
• Packet Drop Logging—Select to create a SYSLOG when a packet is
dropped as a result of a First Hop Security feature within this policy.
- Inherit—Use the value from the VLAN or the global configuration.
- Enable—Create a SYSLOG when a packet is dropped as a result of First
Hop Security.
- Disable—Do not create a SYSLOG when a packet is dropped as a result
of First Hop Security.
To attach this policy to an interface:
• Attach Policy to VLAN—Click to jump to
where you can attach this policy to a VLAN.
Policy Attachment (VLAN)
23
page
528