25
STEP 4
STEP 5
STEP 1
STEP 2
557
To configure system-defined default policies or existing user defined policy select the policy
in the policy table and click Edit.
To attach this policy to an interface:
•
Attach Policy to VLAN—Click to jump to
you can attach this policy to a VLAN.
•
Attach Policy to Interface—Click to jump to
can attach this policy to a port.
DHCPv6 Guard Settings
Use the DHCPv6 Guard Settings page to enable the DHCPv6 Guard feature on a specified
group of VLANs and to set the global configuration values for this feature. If required, a
policy can be added or the system-defined default DHCPv6 Guard policies can be configured
in this page.
To configure DHCPv6 Guard:
Click Security > IPv6 First Hop Security > DHCPv6 Guard Settings.
The currently-defined polices are displayed. For each policy, its Policy Type is displayed,
which indicates whether it is a default or user-defined policy.
Enter the following global configuration fields:
•
DHCPv6 Guard VLAN List—Enter one or more VLANs on which DHCPv6 Guard is
enabled.
•
Device Role—Displays the device role. See definition in the Add page.
•
Minimal Preference—This field indicates whether the DHCPv6 Guard policy will
check the minimum advertised preference value of the packet received.
-
No Verification—Disables verification of the minimum advertised preference value
of the packet received.
-
User Defined—Verifies that the advertised preference value is greater than or equal
to this value. This value must be less than the Maximal Preference value.
•
Maximal Preference—This field indicates whether the DHCPv6 Guard policy will
check the maximum advertised preference value of the packet received. This value must
be greater than the Minimal Preference value.
-
No Verification—Disables verification of the lower boundary of the hop count limit.
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
Security: IPv6 First Hop Security
Configuring IPv6 First Hop Security through Web GUI
Policy Attachment (VLAN)
Policy Attachment (Port)
page where
page where you