Table of Contents
Advertisement
29
617
no device-role
Parameters
•
host—Sets the role of the device to host.
•
router—Sets the role of the device to router.
Default Configuration
Policy attached to port or port channel: the value configured in the policy attached
to the VLAN.
Policy attached to VLAN: host.
Command Mode
ND inspection Policy Configuration mode
User Guidelines
If this command is part of a policy attached to a VLAN, it is applied to all the ports
in the VLAN. If it is defined in a policy attached to a port in the VLAN, this value
overrides the value in the policy attached to the VLAN.
ND Inspection performs egress filtering of NDP messages depending on a port
role.The following table specifies the filtering rules.
Message
Host
RA
Permit
RS
Deny
CPA
Permit
CPS
Deny
ICMP Redirect
Permit
Example
The following example defines an ND Inspection policy named policy 1 and
configures the port role as router:
switchxxxxxx(config)#
switchxxxxxx(config-nd-inspection)#
switchxxxxxx(config-nd-inspection)#
Router
Permit
Permit
Permit
Permit
Permit
ipv6 nd inspection policy policy1
device-role router
exit
Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
IPv6 First Hop Security
Advertisement
Table of Contents
