Configuring IPv6 First Hop Security
Command or Action
Step 4
preference min limit
Example:
Device(config-dhcp-guard)# preference min 0
Step 5
preference max limit
Example:
Device(config-dhcp-guard)# preference max 255
Step 6
trusted-port
Example:
Device(config-dhcp-guard)# trusted-port
Step 7
exit
Example:
Device(config-dhcp-guard)# exit
Step 8
interface type number
Example:
Device(config)# interface GigabitEthernet 0/2/0
Step 9
switchport
Example:
Device(config-if)# switchport
Step 10
ipv6 dhcp guard [attach-policy policy-name]
Example:
Device(config-if)# ipv6 dhcp guard attach-policy
pol1
Step 11
exit
Example:
Device(config-if)# exit
Step 12
vlan configuration vlan-id
Example:
Device(config)# vlan configuration 1
Purpose
(Optional) Enables verification that the advertised
preference (in preference option) is greater than the
specified limit. If not specified, this check will be bypassed.
(Optional) Enables verification that the advertised
preference (in preference option) is less than the specified
limit. If not specified, this check will be bypassed.
(Optional) Specifies that this policy is being applied to
trusted ports. All DHCP guard policing will be disabled.
Exits DHCP guard configuration mode and returns to
global configuration mode.
Specifies an interface and enters interface configuration
mode.
Puts an interface that is in Layer 3 mode into Layer 2 mode
for Layer 2 configuration.
Attaches a DHCPv6 guard policy to an interface.
Exits interface configuration mode and returns to global
configuration mode.
Specifies a VLAN and enters VLAN configuration mode.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Configuring DHCP DHCPv6 Guard
381