Question

You are deploying IPv6 First Hop Security on an access switch. After configuring an IPv6 snooping policy named PROT and enabling 'ipv6 source-guard attach-policy' on interface GigabitEthernet0/1, hosts on that port lose IPv6 connectivity. The command 'show ipv6 neighbors binding' shows an empty table even though hosts are actively sending traffic. You confirm the hosts have valid dynamically learned addresses. Which action most likely resolves the empty binding table so source guard can permit legitimate traffic?

Accepted Answer

Attach the IPv6 snooping policy PROT to interface GigabitEthernet0/1 with 'ipv6 snooping attach-policy PROT'

Answer

Enable 'ipv6 nd raguard' on the interface so router advertisements can populate the binding table

Answer

Add static binding entries for every host using 'ipv6 neighbor binding vlan' commands

Answer

Increase the binding table reachable lifetime with 'ipv6 neighbor binding max-entries'