Cisco 350 Series Administration Manual page 601

Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
STEP 4
STEP 5
STEP 6
STEP 1
STEP 2
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
Click Apply to add the settings to the Running Configuration file.
To configure system-defined default policies or existing user defined policy select the policy
in the policy table and click Edit.
To attach this policy to an interface:
• Attach Policy to VLAN—Click to jump to
you can attach this policy to a VLAN.
• Attach Policy to Interface—Click to jump to
can attach this policy to a port.
DHCPv6 Guard Settings
Use the DHCPv6 Guard Settings page to enable the DHCPv6 Guard feature on a specified
group of VLANs and to set the global configuration values for this feature. If required, a
policy can be added or the system-defined default DHCPv6 Guard policies can be configured
in this page.
To configure DHCPv6 Guard:
Click Security > IPv6 First Hop Security > DHCPv6 Guard Settings.
The currently-defined polices are displayed. For each policy, its Policy Type is displayed,
which indicates whether it is a default or user-defined policy.
Enter the following global configuration fields:
• DHCPv6 Guard VLAN List—Enter one or more VLANs on which DHCPv6 Guard is
enabled.
• Device Role—Displays the device role. See definition in the Add page.
• Minimal Preference—This field indicates whether the DHCPv6 Guard policy will
check the minimum advertised preference value of the packet received.
- No Verification—Disables verification of the minimum advertised preference value
of the packet received.
- User Defined—Verifies that the advertised preference value is greater than or equal
to this value. This value must be less than the Maximal Preference value.
• Maximal Preference—This field indicates whether the DHCPv6 Guard policy will
check the maximum advertised preference value of the packet received. This value must
be greater than the Minimal Preference value.
Policy Attachment (VLAN)
Policy Attachment (Port)
26
page where
page where you
460