Configuring DHCP DHCPv6 Guard
Configuring DHCP DHCPv6 Guard
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12. vlan configuration vlan-id
13. ipv6 dhcp guard [attach-policy policy-name]
14. exit
15. exit
16. show ipv6 dhcp guard policy [policy-name]
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Device# configure terminal
Step 2
ipv6 dhcp guard policy policy-name
Example:
Device(config)# ipv6 dhcp guard policy pol1
Step 3
device-role {client | server}
Example:
Device(config-dhcp-guard)# device-role server
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
380
configure terminal
ipv6 dhcp guard policy policy-name
device-role {client | server}
preference min limit
preference max limit
trusted-port
exit
interface type number
switchport
ipv6 dhcp guard [attach-policy policy-name]
exit
Configuring IPv6 First Hop Security
Purpose
Enters global configuration mode.
Defines the DHCPv6 guard policy name and enters DHCP
guard configuration mode.
Specifies the device role of the device attached to the target
(interface or VLAN).
• device-role client—Interface where a normal DHCPv6
client is connected. It blocks any incoming server
packets.
• device-role server—Interface where a normal
DHCPv6 server is connected. It allows all DHCPv6
packets originating on this interface.