Cisco Catalyst 2960-X User Manual

PurposeCommand or Action
Enables filtering of Router Advertisement messages by the Other
Configuration, or "O" flag field. A rouge RA message with an O field
[no]other-config-flag {on | off}
Example:
Switch(config-nd-raguard)#
other-config-flag on
Step 7
of 1 can cause a host to use a rogue DHCPv6 server. If not configured,
this filter is disabled.
On—Accepts and forwards RA messages with an O value of 1, blocks
those with 0.
Off—Accepts and forwards RA messages with an O value of 0, blocks
those with 1.
Enables filtering of Router Advertisement messages by the Router
Preference flag. If not configured, this filter is disabled.
[no]router-preference maximum {high |
medium | low}
Step 8
Example:
Switch(config-nd-raguard)#
router-preference maximum high
• high—Accepts RA messages with the Router Preference set to
high, medium, or low.
• medium—Blocks RA messages with the Router Preference set
to high.
• low—Blocks RA messages with the Router Preference set to
medium and high.
When configured as a trusted port, all attached devices are trusted,
and no further message verification is performed.
[no]trusted-port
Example:
Switch(config-nd-raguard)# trusted-port
Step 9
Restores a command to its default value.default {device-role | hop-limit {maximum |
minimum} | managed-config-flag | match {ipv6
Step 10
access-list | ra prefix-list } | other-config-flag |
router-preference maximum| trusted-port}
Example:
Switch(config-nd-raguard)# default
hop-limit
(Optional)—Displays the ND Guard Policy configuration without
exiting the RA Guard policy configuration mode.
do show ipv6 nd raguard policy policy_name
Example:
Switch(config-nd-raguard)# do show ipv6
nd raguard policy example_policy
Step 11
How to Attach an IPv6 Router Advertisement Guard Policy to an Interface
Beginning in privileged EXEC mode, follow these steps to attach an IPv6 Router Advertisement policy to an
interface or to VLANs on the interface :
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
456 OL-29048-01
Configuring IPv6 First Hop Security
How to Attach an IPv6 Router Advertisement Guard Policy to an Interface

Cisco Catalyst 2960-X Specifications

General

Console port	RJ-45
USB 2.0 ports quantity	2
SFP module slots quantity	4
Installed SFP modules quantity	-
Gigabit Ethernet (copper) ports quantity	48
Basic switching RJ-45 Ethernet ports type	Gigabit Ethernet (10/100/1000)
Power source	AC
Input current	5 A
AC input voltage	100 - 240 V
Power consumption (typical)	60.9 W
Number of power supply units	1
Redundant power supply (RPS) support	Yes
Operating altitude	0 - 3000 m
Non-operating altitude	0 - 4000 m
Storage temperature (T-T)	-25 - 70 °C
Operating temperature (T-T)	-5 - 40 °C
Operating relative humidity (H-H)	10 - 95 %
Switching protocols	UDP, TCP, RADIUS/TACACS+
Number of VLANs	1023
Networking standards	IEEE 802.1ab, IEEE 802.1D, IEEE 802.1p, IEEE 802.1Q, IEEE 802.1s, IEEE 802.1w, IEEE 802.1x, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3ae, IEEE 802.3af, IEEE 802.3ah, IEEE 802.3at, IEEE 802.3az, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z
Throughput	107.1 Mpps
Jumbo frames	9216
Number of queues	8
MAC address table	16000 entries
Number of static routes	1000
DHCP features	DHCP server
Authentication	MAC-based authentication, Port-based authentication
Security algorithms	802.1x RADIUS, SNMP, SSH
Access Control List (ACL) rules	3
Switch type	Managed
Switch layer	L2/L3
Safety	UL 60950-1, CAN/CSA-C22.2 No. 60950-1, EN 60950-1, IEC 60950-1, AS/NZS 60950-1
Form factor	1U
Product color	Black
Total Power over Ethernet (PoE) budget	370 W
Power over Ethernet (PoE) ports quantity	24
Power over Ethernet plus (PoE+) ports quantity	12
Memory type	DRAM
Noise level	39 dB
Flash memory	128 MB
Internal memory	512 MB
Processor frequency	600 MHz
Mean time between failures (MTBF)	276870 h

Weight and Dimensions

Depth	368 mm
Width	445 mm
Height	45 mm
Weight	5800 g