Cisco 300 Series Cli Manual page 506

Stackable managed switches

Hide thumbs Also See for 300 Series:

Table of Contents

IPv6 First Hop Security

OL-32830-01 Command Line Interface Reference Guide

Default Configuration

Verification is disabled.

Command Mode

Global Configuration mode

User Guidelines

This command enables verification that the preference value in messages sent by

DHCPv6 servers messages (see RFC3315) is greater than or less than the

Note. When DHCPv6 Guard receives a RELAY-REPL message, it takes it from the

encapsulated message.

Configuring the minimum

allowed value. The received DHCPv6 reply message with a preference value less

than a value specified by the value argument is dropped.

Configuring the maximum

allowed value. The received DHCPv6 reply message with a preference value

greater than the value specified by the value argument is dropped.

Use no ipv6 dhcp guard preference to disable verification of the advertised

preference value in DHCPv6 reply messages.

Use no ipv6 dhcp guard preference maximum to disable verification of the

maximum boundary of the value of the advertised preference value in DHCPv6

Use the no ipv6 dhcp guard preference minimum command to disable verification

of the minimum boundary of the value of the advertised preference value in

DHCPv6 messages.

Example 1—The following example defines a global minimum preference value of

10 and a global maximum preference value of 102 using two commands:

switchxxxxxx(config)#

keyword and argument specifies the minimum

keyword and argument specifies the maximum

ipv6 dhcp guard preference minimum 10

ipv6 dhcp guard preference maximum 102