PurposeCommand or Action
(Optional) Displays the configuration of the IPv6 DHCP guard
policy without leaving the configuration submode. Omitting the
policy_name variable displays all DHCPv6 policies.
do show ipv6 dhcp guard policy policy_name
Example:
Switch(config-dhcp-guard)# do show ipv6 dhcp
guard policy example_policy
Step 9
Example of DHCPv6 Guard Configuration
enable
configure terminal
ipv6 access-list acl1
permit host FE80::A8BB:CCFF:FE01:F700 any
ipv6 prefix-list abc permit 2001:0DB8::/64 le 128
ipv6 dhcp guard policy pol1
device-role server
match server access-list acl1
match reply prefix-list abc
preference min 0
preference max 255
trusted-port
interface GigabitEthernet 0/2/0
switchport
ipv6 dhcp guard attach-policy pol1 vlan add 1
vlan 1
ipv6 dhcp guard attach-policy pol1
show ipv6 dhcp guard policy pol1
How to Attach an IPv6 DHCP Guard Policy to an Interface or a VLAN on an
Interface
Beginning in privileged EXEC mode, follow these steps to configure IPv6 Binding Table Content :
SUMMARY STEPS
1.
configure terminal
2.
interface Interface_type stack/module/port
3.
ipv6 dhcp guard [attach-policy policy_name [ vlan {vlan_ids | add vlan_ids | except vlan_ids | none |
remove vlan_ids | all} ] | vlan [ {vlan_ids | add vlan_ids | exceptvlan_ids | none | remove vlan_ids |
all} ]
4.
do show running-config interface Interface_type stack/module/port
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 461
Configuring IPv6 First Hop Security
How to Attach an IPv6 DHCP Guard Policy to an Interface or a VLAN on an Interface