[c-nsp] ipv6 nd raguard

[Schmidt, Jason W]

You can create IPv6 PACLs on 3560/3750 switches that accomplish the same thing. See: http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6553/whitepaper_c11-602135.html (near the bottom is an example).

Whether you can create and apply IPv6 PACLs with LANBase I don't know, you'll have to figure that part out. :) You do need an IPv6-enabled SDM template configured to so however.


--
Jason Schmidt
Network Engineer
UW-Whitewater

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Maarten Carels
Sent: Friday, December 02, 2011 3:20 AM
To: Cisco Network Service Providers
Subject: [c-nsp] ipv6 nd raguard

Hi list,

I'm trying to protect the ipv6 part of our net by using the RA-Guard feature, just line we use dhcp-snooping for ipv4.

Our 6500 switches recognize 'ipv6 nd raguard' without problems. But our access switches (we bought a bunch of 3560x switches with LANBase software) don't.

I'm wondering if we need IPBase for that.

--maarten
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/