Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
-
Inherited—Role of device is inherited from either the VLAN or system default
(client).
-
Perimeter—Port is connected to devices not supporting IPv6 First Hop Security.
-
Internal—Port is connected to devices supporting IPv6 First Hop Security.
•
Neighbor Binding Logging—Select one of the following options to specify logging:
-
Inherited—Logging option is the same as the global value.
-
Enable—Enable logging of Binding table main events.
-
Disable—Disable logging of Binding table main events.
•
Address Prefix Validation—Select one of the following options to specify validation
of addresses:
-
Inherited—Validation option is the same as the global value.
-
Enable—Enable validation of addresses.
-
Disable—Disable validation of addresses
Global Address Binding Configuration:
•
Inherit Address Binding Settings—Enable to use the global address binding settings.
•
Binding from NDP Messages—To change the global configuration of allowed
configuration methods of global IPv6 addresses within an IPv6 Neighbor Binding
policy, select one of the following options:
-
Any—Any configuration methods (stateless and manual) are allowed for global
IPv6 bound from NDP messages
-
Stateless—Only stateless auto configuration is allowed for global IPv6 bound from
NDP messages.
-
Disable—Binding from NDP messages is disabled.
•
Binding from DHCPv6 Messages—Select to enable binding from DHCPv6.
Neighbor Binding Entry Limits—See above.
•
Entries per VLAN—Select Inherited to use global value, No Limit to set no limit on
the number of entries and User Defined to set a special value for this policy.
•
Entries per Interface—Select Inherited to use global value, No Limit to set no limit
on the number of entries and User Defined to set a special value for this policy.
26
466