From the course: Cisco CCNP ENARSI v1.1 (300-410) Cert Prep: 3 Infrastructure Security

Unlock this course with a free trial

Join today to access over 22,700 courses taught by industry experts.

IPv6 source guard

IPv6 source guard

From the course: Cisco CCNP ENARSI v1.1 (300-410) Cert Prep: 3 Infrastructure Security

Start my 1-month free trial Buy for my team

IPv6 source guard

“

- [Instructor] The final IP version six security feature that you want to be able to describe in this section of the blueprint is IP version six Source Guard. This allows you to filter inbound traffic on layer two switch ports that are not found in the IP version six snooping binding table. We mentioned this table in regard to IP version six neighbor discovery inspection where the table learns and stores information related to IP version six addresses, Mac addresses, VLAN, and interface numbers. With IP version six Source Guard, though, this only examines the snooping table information and it does not add to or update the table in any way. That's why you would use IP version six snooping in conjunction with IP version six Source Guard so that you can help fill up the binding table with relevant information. So it's important to distinguish the fact that IP version six Source Guard does not inspect the NDP messages as IP version six snooping does. IP version six Source Guard simply…

Contents