Cisco 300 Series Cli Manual page 513

25
513
Default Configuration
No IPv6 First Hop Security policy is configured
Command Mode
Global Configuration mode
User Guidelines
This command defines an IPv6 First Hop Security policy, and places the switch in
IPv6 First Hop Security Policy Configuration mode
The following command can be configured in IPv6 First Hop Security Policy
Configuration mode:
•
logging packet drop
Each policy of the same type (for example, IPv6 First Hop Security policies) must
have a unique name. Policies of different types can have the same policy name.
The switch supports two predefined, empty, default IPv6 First Hop Security
policies named: "vlan_default" and "port_default":
ipv6 first hop security policy vlan_default
exit
ipv6 first hop security policy port_default
exit
These policies cannot be removed but they can be changed. The no ipv6 first hop
security policy does not remove these policies, it only removes the policy
configurations defined by the user.
The default policies do not need to be attached by the
attach-policy (port mode)
command. The vlan_default policy is attached by default to a VLAN, if no other
policy is attached to the VLAN. The port_default policy is attached by default to a
port, if no other policy is attached to the port.
You can define a policy using the ipv6 first hop security policy command multiple
times.
If an attached policy is removed, it is detached automatically before removing.
or ipv6 first hop security attach-policy (VLAN mode)
OL-32830-01 Command Line Interface Reference Guide
IPv6 First Hop Security
ipv6 first hop security