IPv6 Device Tracking |
12.2(50)SY |
This feature allows IPv6 host liveness to be tracked so the neighbor binding table can be immediately updated when an IPv6 host disappears. The following commands were introduced or modified: ipv6 neighbor binding, ipv6 neighbor binding down-lifetime, ipv6 neighbor binding logging, ipv6 neighbor binding max-entries, ipv6 neighbor binding stale-lifetime, ipv6 neighbor binding vlan, ipv6 neighbor tracking, show ipv6 neighbor binding. |
IPv6 ND Inspection |
12.2(50)SY |
The IPv6 ND Inspection feature learns and secures bindings for stateless autoconfiguration addresses in layer 2 neighbor tables. The following commands were introduced: clear ipv6 snooping counters, debug ipv6 snooping, device-role, drop-unsecure, ipv6 nd inspection, ipv6 nd inspection policy, sec-level minimum, show ipv6 snooping capture-policy, show ipv6 snooping counters,show ipv6 snooping features, show ipv6 snooping policies, tracking trusted-port. |
IPv6 PACL |
12.2(54)SG 12.2(33)SXI4 12.2(50)SY |
The IPv6 PACL permits or denies the movement of traffic between Layer 3 (L3) subnets and VLANs, or within a VLAN. The following commands were introduced or modified: access-group mode, ipv6 traffic-filter. |
Secure Neighbor Discovery for Cisco IOS Software |
12.4(24)T |
The Secure Neighbor Discovery (SeND) protocol is designed to counter the threats of the ND protocol. SeND defines a set of neighbor discovery options and two neighbor discovery messages. SeND also defines a new autoconfiguration mechanism to establish address ownership. The following commands were introduced or modified: auto-enroll, crypto key generate rsa, crypto pki authenticate, crypto pki enroll, crypto pki import, enrollment terminal (ca-trustpoint), enrollment url (ca-trustpoint), fingerprint, ip-extension, ip http server, ipv6 address, ipv6 address link-local, ipv6 cga modifier rsakeypair, ipv6 cga modifier rsakeypair (interface), ipv6 nd secured certificate-db, ipv6 nd secured full-secure, ipv6 nd secured full-secure (interface), ipv6 nd secured key-length, ipv6 nd secured sec-level, ipv6 nd secured timestamp, ipv6 nd secured timestamp-db, ipv6 nd secured trustanchor, ipv6 nd secured trustpoint, password (ca-trustpoint), revocation-check, rsakeypair, serial-number (ca-trustpoint), show ipv6 cga address-db, show ipv6 cga modifier-db, show ipv6 nd secured certificates, show ipv6 nd secured counters interface, show ipv6 nd secured nonce-db, show ipv6 nd secured timestamp-db, subject-name. |