Cisco 300 Series Cli Manual page 501

25
501
•
The rules, configured in the policy attached to the VLAN are added to the
set if they have not been added.
•
The global rules are added to the set if they have not been added.
Use no ipv6 dhcp guard attach-policy to detach all user-defined DHCP Guard
policies attached to the port.
Use no ipv6 dhcp guard attach-policy
from the port.
Examples
Example 1—In the following example, the DHCPv6 Guard policy policy1 is
attached to the gi 1 1 port and the default policy port_default is detached:
switchxxxxxx(config)#
switchxxxxxx(config-if)#
switchxxxxxx(config-if)#
Example 2—In the following example, the DHCPv6 Guard policy policy1 is
attached to the gi 1 1 port and applied to VLANs 1-10 and 12-20:
switchxxxxxx(config)#
switchxxxxxx(config-if)#
switchxxxxxx(config-if)#
Example 3—In the following example, the DHCPv6 Guard policy policy1 is
attached to the gi 1 1 port and applied to VLANs 1-10 and the DHCPv6 Guard
policy policy2 is attached to the gi 1 1 port and applied to VLANs 12-20:
switchxxxxxx(config)#
switchxxxxxx(config-if)#
switchxxxxxx(config-if)#
switchxxxxxx(config-if)#
policy-name
interface gi11
ipv6 dhcp guard attach-policy policy1
exit
interface gi11
ipv6 dhcp guard attach-policy policy1 vlan 1-10,12-20
exit
interface gi11
ipv6 dhcp guard attach-policy policy1 vlan 1-10
ipv6 dhcp guard attach-policy policy2 vlan 12-20
exit
OL-32830-01 Command Line Interface Reference Guide
IPv6 First Hop Security
to detach the specific policy