Cisco 300 Series User Manual

IPv6 First Hop Security
515 OL-32830-01 Command Line Interface Reference Guide
25
Command Mode
Interface (VLAN) Configuration mode
User Guidelines
Use the command to enable ND Inspection on a VLAN.
IPv6 ND Inspection validates the Neighbor Discovery Protocol (NDP) messages
using the ND Inspection policies and global ND Inspection configuration.
ND Inspection bridges NDP messages to all ports excluding the source port within
the VLAN with the following exception: RS and CPS messages are not bridged to
ports configured as host (see the device-role command).
ND inspection is performed after RA Guard.
Examples
Example 1—The following example enables ND Inspection on VLAN 100:
switchxxxxxx(config)# interface vlan 100
switchxxxxxx(config-if)#
ipv6 nd inspection
switchxxxxxx(config-if)# exit
Example 2—The following example enables ND Inspection on VLANs 100-107:
switchxxxxxx(config)# interface range vlan 100-107
switchxxxxxx(config-if-range)#
ipv6 nd inspection
switchxxxxxx(config-if-range)# exit
25.24 ipv6 nd inspection attach-policy (port
mode)
To attach an ND Inspection policy to a specific port, use the ipv6 nd inspection
attach-policy command in Interface Configuration mode. To return to the default,
use the no form of this command.

Cisco 300 Series Specifications

General

Brand	Cisco
Model	300 Series
Category	Switch
Language	English