Cisco 350 Series Administration Manual page 613

Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
STEP 1
STEP 2
STEP 3
Cisco 350, 350X and 550X Series Managed Switches, Firmware Release 2.4, ver 0.4
- Minimal Security Level:—If unsecure messages are not dropped, what is the
minimum security level for packets to be forwarded.
- Validate Source MAC:—Is source MAC address verification enabled.
• Neighbor Binding Status
- Neighbor Binding State on Current VLAN—Is Neighbor Binding enabled on the
current VLAN.
- Device Role—Neighbor Binding device role.
- Logging Binding—Is logging of Neighbor Binding table events enabled.
- Address Prefix Validation—Is address prefix validation enabled.
- Global Address Configuration—Which messages are validated.
- Max Entries per VLAN—Maximum number of dynamic Neighbor Binding table
entries per VLAN allowed.
- Max Entries per Interface—Maximum number of Neighbor Binding table entries
per interface allowed.
- Max Entries per MAC Address—Maximum number of Neighbor Binding table
entries per MAC address allowed.
• IPv6 Source Guard Status:
- IPv6 Source Guard State on Current VLAN—Is IPv6 Source Guard enabled on the
current VLAN.
- Port Trust—Whether the port is trusted and how it received its trusted status.
FHS Statistics
To display FHS statistics:
Click Security > IPv6 First Hop Security > FHS Statistics.
Select the Refresh Rate, the time period that passes before the statistics are refreshed.
The following global overflow counters are displayed:
• Neighbor Binding Table—Number of entries that could not be added to this table
because the table reached its maximum size.
26
472