Download User Manual

Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
•
24
Binding from NDP Messages—To change the global configuration of allowed configuration methods
of global IPv6 addresses within an IPv6 Neighbor Binding policy, select one of the following options:
-
Any—Any configuration methods (stateless and manual) are allowed for global IPv6 bound from
NDP messages
-
Stateless—Only stateless auto configuration is allowed for global IPv6 bound from NDP
messages.
-
Disable—Binding from NDP messages is disabled.
Binding from DHCPv6 Messages:—Select to enable binding from DHCPv6.
Neighbor Binding Entry Limits—See above.
•
Entries per VLAN—Select Inherited to use global value, No Limit to set no limit on the number of
entries and User Defined to set a special value for this policy.
•
Entries per Interface—Select Inherited to use global value, No Limit to set no limit on the number of
entries and User Defined to set a special value for this policy.
•
Entries per MAC Address—Select Inherited to use global value, No Limit to set no limit on the
number of entries and User Defined to set a special value for this policy.
STEP 5 Click Apply to add the settings to the Running Configuration file.
To attach this policy to an interface:
•
Attach Policy to VLAN—Click to jump to Policy Attachment (VLAN) page where you can attach this
policy to a VLAN.
•
Attach Policy to Interface—Click to jump to Policy Attachment (Port) page where you can attach
this policy to a port.
IPv6 Source Guard Settings
Use the IPv6 Source Guard Settings page to enable the IPv6 Source Guard feature on a specified group of
VLANs. If required, a policy can be added or the system-defined default IPv6 Source Guard policies can be
configured in this page.
To configure IPv6 Source Guard:
STEP 1 Click Security > IPv6 First Hop Security > IPv6 Source Guard Settings.
STEP 2 Enter the following global configuration fields:
Cisco Small Business 500 Series Stackable Managed Switch Administration Guide
477