Cisco Cisco SG500-52PP 52-port Gigabit Max PoE+ Stackable Managed Switch 技术参考
IPv6 First Hop Security
602
OL-31486-02 Command Line Interface Reference Guide
29
•
The rules, configured in the policy attached to the VLAN are added to the
set if they have not been added.
set if they have not been added.
•
The global rules are added to the set if they have not been added.
Use no ipv6 dhcp guard attach-policy to detach all user-defined DHCP Guard
policies attached to the port.
policies attached to the port.
Use no ipv6 dhcp guard attach-policy
policy-name
to detach the specific policy
from the port.
Examples
Example 1—In the following example, the DHCPv6 Guard policy policy1 is
attached to the gi1/1/1 port and the default policy port_default is detached:
attached to the gi1/1/1 port and the default policy port_default is detached:
switchxxxxxx(config)#
interface gi1/1/1
switchxxxxxx(config-if)#
ipv6 dhcp guard attach-policy policy1
switchxxxxxx(config-if)#
exit
Example 2—In the following example, the DHCPv6 Guard policy policy1 is
attached to the gi1/1/1 port and applied to VLANs 1-10 and 12-20:
attached to the gi1/1/1 port and applied to VLANs 1-10 and 12-20:
switchxxxxxx(config)#
interface gi1/1/1
switchxxxxxx(config-if)#
ipv6 dhcp guard attach-policy policy1 vlan 1-10,12-20
switchxxxxxx(config-if)#
exit
Example 3—In the following example, the DHCPv6 Guard policy policy1 is
attached to the gi1/1/1 port and applied to VLANs 1-10 and the DHCPv6 Guard
policy policy2 is attached to the gi1/1/1 port and applied to VLANs 12-20:
attached to the gi1/1/1 port and applied to VLANs 1-10 and the DHCPv6 Guard
policy policy2 is attached to the gi1/1/1 port and applied to VLANs 12-20:
switchxxxxxx(config)#
interface gi1/1/1
switchxxxxxx(config-if)#
ipv6 dhcp guard attach-policy policy1 vlan 1-10
switchxxxxxx(config-if)#
ipv6 dhcp guard attach-policy policy2 vlan 12-20
switchxxxxxx(config-if)#
exit