How To Attach An Ipv6 Neighbor Discovery Inspection Policy To An Interface - Cisco Catalyst 2960-X Security Configuration Manual

Configuring IPv6 First Hop Security
Command or Action
Step 12
do show ipv6 nd inspection policy policy_name
Example:
Switch(config-nd-inspection)# do show ipv6 nd
inspection policy example_policy

How to Attach an IPv6 Neighbor Discovery Inspection Policy to an Interface

Beginning in privileged EXEC mode, follow these steps to attach an IPv6 ND Inspection policy to an interface
or VLANs on an interface :
SUMMARY STEPS
1. configure terminal
2. interface Interface_type stack/module/port
3. ipv6 nd inspection [attach-policy policy_name [ vlan {vlan_ids | add vlan_ids | except vlan_ids | none
| remove vlan_ids | all} ] | vlan [ {vlan_ids | add vlan_ids | exceptvlan_ids | none | remove vlan_ids |
all} ]
4. do show running-config
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
Switch# configure terminal
Step 2 interface Interface_type stack/module/port
Example:
Switch(config)#
Step 3 ipv6 nd inspection [attach-policy policy_name [ vlan {vlan_ids
| add vlan_ids | except vlan_ids | none | remove vlan_ids | all}
] | vlan [ {vlan_ids | add vlan_ids | exceptvlan_ids | none |
remove vlan_ids | all} ]
Example:
Switch(config-if)# ipv6 nd inspection attach-policy
example_policy
or
Switch(config-if)# ipv6 nd inspection attach-policy
example_policy vlan 222,223,224
OL-29048-01
interface gigabitethernet 1/1/4
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
How to Attach an IPv6 Neighbor Discovery Inspection Policy to an Interface
Purpose
Verifies the ND Inspection Configuration without
exiting ND inspection configuration mode.
Purpose
Enters the global configuration mode.
Specifies an interface type and identifier; enters the
interface configuration mode.
Attaches the Neighbor Discovery Inspection policy
to the interface or the specified VLANs on that
interface. The default policy is attached if the
attach-policy option is not used.
451