Cisco Catalyst 250 Series User Manual

PurposeCommand or Action
Confirms that the policy is attached to the specified
interface without exiting the configuration mode.
do show running-config interfaceportchannel_interface_name
Example:
Switch#(config-if-range)# do show running-config
int po11
Step 4
How to Configure an IPv6 DHCP Guard Policy
Beginning in privileged EXEC mode, follow these steps to configure an IPv6 DHCP (DHCPv6) Guard policy:
SUMMARY STEPS
1.
configure terminal
2.
[no]ipv6 dhcp guard policy policy-name
3.
[no]device-role {client | server}
4.
[no] match server access-list ipv6-access-list-name
5.
[no] match reply prefix-list ipv6-prefix-list-name
6.
[no]preference{ max limit | min limit }
7.
[no] trusted-port
8.
default {device-role | trusted-port}
9.
do show ipv6 dhcp guard policy policy_name
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the DHCPv6 Guard policy name and enters DHCPv6
Guard Policy configuration mode.
[no]ipv6 dhcp guard policy policy-name
Example:
Switch(config)# ipv6 dhcp guard policy
example_policy
Step 2
(Optional) Filters out DHCPv6 replies and DHCPv6 advertisements
on the port that are not from a device of the specified role. Default
is client.
[no]device-role {client | server}
Example:
Switch(config-dhcp-guard)# device-role server
Step 3
• client—Default value, specifies that the attached device is a
client. Server messages are dropped on this port.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 459
Configuring IPv6 First Hop Security
How to Configure an IPv6 DHCP Guard Policy

Cisco Catalyst 250 Series Specifications

General

Brand	Cisco
Model	Catalyst 250 Series
Category	Switch
Language	English