Ipv6 First Hop Security Overview - Cisco 350 Series Administration Manual

26

IPv6 First Hop Security Overview

441
IPv6 FHS is a suite of features designed to secure link operations in an IPv6-enabled network.
It is based on the Neighbor Discovery Protocol and DHCPv6 messages.
In this feature, a Layer 2 switch (as shown in
messages, DHCPv6 messages and user data messages according to a number of different rules.
Figure 1 IPv6 First Hop Security Configuration
IPv6 Host
(End Node)
Monitor
A separate and independent instance of IPv6 First Hop Security runs on each VLAN on which
the feature is enabled.
Abbreviations
Name
CPA message
CPS message
DAD-NS message
FCFS-SAVI
Figure
First Hop Switch
Description
Certification Path Advertisement message
Certification Path Solicitation message
Duplicate Address Detection Neighbor Solicitation
message
First Come First Served - Source Address Validation
Improvement
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
Security: IPv6 First Hop Security
IPv6 First Hop Security Overview
1) filters Neighbor Discovery Protocol
IPv6 Router