How To Configure An Ipv6 Snooping Policy - Cisco Catalyst 2960-X Security Configuration Manual

How to Configure an IPv6 Snooping Policy

• IPv6 Neighbor Discovery Multicast Suppress—The IPv6 Neighbor Discovery multicast suppress feature
• DHCPv6 Relay—Lightweight DHCPv6 Relay Agent—The DHCPv6 Relay—Lightweight DHCPv6
How to Configure an IPv6 Snooping Policy
Beginning in privileged EXEC mode, follow these steps to configure IPv6 Snooping Policy :
SUMMARY STEPS
1. configure terminal
2. ipv6 snooping policy policy-name
3. {[default ] | [device-role {node | switch}] | [limit address-count value] | [no] | [protocol {dhcp | ndp}
] | [security-level {glean | guard | inspect} ] | [tracking {disable [stale-lifetime [seconds | infinite] |
enable [reachable-lifetime [seconds | infinite] } ] | [trusted-port ] }
4. end
5. show ipv6 snooping policy policy-name
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
Switch# configure terminal
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
442
IPv6 Destination Guard is recommended only on Layer 3. It is not recommended on
Note
Layer2.
For more information about IPv6 Destination Guard, see the
Cisco IOS IPv6 Configuration Guide Library on Cisco.com.
is an IPv6 snooping feature that runs on a switch or a wireless controller and is used to reduce the amount
of control traffic necessary for proper link operations.
Relay Agent feature allows relay agent information to be inserted by an access node that performs a
link-layer bridging (non-routing) function. Lightweight DHCPv6 Relay Agent (LDRA) functionality
can be implemented in existing access nodes, such as DSL access multiplexers (DSLAMs) and Ethernet
switches, that do not support IPv6 control or routing functions. LDRA is used to insert relay-agent
options in DHCP version 6 (DHCPv6) message exchanges primarily to identify client-facing interfaces.
LDRA functionality can be enabled on an interface and on a VLAN.
For more information about DHCPv6 Relay, See the
Agent section of the IP Addressing: DHCP Configuration Guide, Cisco IOS Release 15.1SG.
DHCPv6 Relay—Lightweight DHCPv6 Relay
Purpose
Enters the global configuration mode.
Configuring IPv6 First Hop Security
IPv6 Destination Guard chapter of the
OL-29048-01