Configuration Examples
Configuration Examples
Example: IPv6 RA Guard Configuration
Device(config)# interface ethernet 1/1
Device(config-if)# ipv6 nd raguard attach-policy
Device# show running-config interface ethernet 1/1
Building configuration...
Current configuration : 129 bytes
!
interface ethernet1/1
switchport
switchport access vlan 222
switchport mode access
access-group mode prefer port
ipv6 nd raguard
end
Example: Configuring DHCP DHCPv6 Guard
The following example displays a sample configuration for DHCPv6 Guard:
configure terminal
ipv6 dhcp guard policy pol1
device-role server
preference min 0
preference max 255
trusted-port
interface GigabitEthernet 0/2/0
switchport
ipv6 dhcp guard attach-policy pol1
vlan configuration 1
ipv6 dhcp guard attach-policy pol1
show ipv6 dhcp guard policy pol1
Example: Configuring IPv6 First-Hop Security Binding Table
config terminal
ipv6 neighbor binding vlan 100 2001:db8::1 interface ethernet3/0
ipv6 neighbor binding max-entries 100
ipv6 neighbor binding logging
ipv6 neighbor binding retry-interval 8
exit
show ipv6 neighbor binding
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
386
Configuring IPv6 First Hop Security