How To Attach An Ipv6 Dhcp Guard Policy To An Interface - Cisco Catalyst 2960-XR Security Configuration Manual

Configuring IPv6 First Hop Security
Command or Action
Step 4
trusted-port
Example:
Switch(config-dhcp-guard)# trusted-port
Step 5 default {device-role | trusted-port}
Example:
Switch(config-dhcp-guard)# default
device-role
Step 6 no {device-role | trusted-port}
Example:
Switch(config-dhcp-guard)# no trusted-port
Step 7
do show ipv6 dhcp guard policy policy_name
Example:
Switch(config-dhcp-guard)# do show ipv6 dhcp
guard policy example_policy

How to Attach an IPv6 DHCP Guard Policy to an Interface

Beginning in privileged EXEC mode, follow these steps to configure IPv6 Binding Table Content :
SUMMARY STEPS
1. configure terminal
2. interface Interface_type stack/module/port
3. ipv6 dhcp guard [attach-policy policy_name [ vlan {vlan_ids | add vlan_ids | except vlan_ids | none |
remove vlan_ids | all} ] | vlan [ {vlan_ids | add vlan_ids | exceptvlan_ids | none | remove vlan_ids |
all} ]
4. do show running-config
OL-29434-01
Purpose
• server—Specifies that the attached device is a DHCP
server. Server messages are allowed on this port.
(Optional) trusted-port—Sets the port to a trusted mode. No
further policing takes place on the port.
If you configure a trusted port then the device-role
Note
option is not available.
(Optional) default—Sets a command to its defaults.
(Optional) no—Removes the configured policy parameters.
(Optional) Displays the configuration of the IPv6 DHCP guard
policy without leaving the configuration submode.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
How to Attach an IPv6 DHCP Guard Policy to an Interface
367