PurposeCommand or Action
Attaches a custom ipv6 snooping policy to the interface or the specified
VLANs on the interface. To attach the default policy to the interface,
ipv6 snooping [attach-policy policy_name [ vlan
{vlan_id | add vlan_ids | exceptvlan_ids | none |
Step 4
use the ipv6 snooping command without the attach-policy keyword.
remove vlan_ids}] | vlan {vlan_id | add vlan_ids
| exceptvlan_ids | none | remove vlan_ids | all} ]
To attach the default policy to VLANs on the interface, use the ipv6
snooping vlan command. The default policy is, security-level guard,
device-role node, protocol ndp and dhcp.
Example:
Switch(config-if)# ipv6 snooping
or
Switch(config-if)# ipv6 snooping
attach-policy example_policy
or
Switch(config-if)# ipv6 snooping vlan
111,112
or
Switch(config-if)# ipv6 snooping
attach-policy example_policy vlan 111,112
Verifies that the policy is attached to the specified interface without
exiting the interface configuration mode.
do show running-config
Example:
Switch#(config-if)# do show running-config
Step 5
How to Attach an IPv6 Snooping Policy to a Layer 2 EtherChannel Interface
Beginning in privileged EXEC mode, follow these steps to attach an IPv6 Snooping policy on an EtherChannel
interface or VLAN:
SUMMARY STEPS
1.
configure terminal
2.
interface range Interface_name
3.
ipv6 snooping [attach-policy policy_name [ vlan {vlan_ids | add vlan_ids | except vlan_ids | none |
remove vlan_ids | all} ] | vlan [ {vlan_ids | add vlan_ids | exceptvlan_ids | none | remove vlan_ids |
all} ]
4.
do show running-config interfaceportchannel_interface_name
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 445
Configuring IPv6 First Hop Security
How to Attach an IPv6 Snooping Policy to a Layer 2 EtherChannel Interface
To Next Page
Loading...
Need help?
General