Configuring Switch Integrated Security Features Information About SISF, on page 1 How to Configure SISF, on page 20 Configuration Examples for SISF, on page 30 Feature History for SISF, on page 38 Information About SISF Overview Switch Integrated Security Features (SISF) is a framework developed to optimize security in Layer 2 domains. It merges the IP Device Tracking (IPDT) and certain IPv6 first-hop security (FHS) functionality 1 , to simplify the migration from IPv4 to IPv6 stack or a dual-stack. The SISF infrastructure provides a unified database that is used by: • IPv6 FHS features:
IPv6 Router Advertisement (RA) Guard, IPv6 DHCP Guard, Layer 2 DHCP Relay, IPv6 Duplicate Address Detection (DAD) Proxy, Flooding Suppression, IPv6 Source Guard, IPv6 Destination Guard, RA Throttler, and IPv6 Prefix Guard. • Features like Cisco TrustSec, IEEE 802.1X, Locator ID Separation Protocol (LISP), Ethernet VPN (EVPN), and Web Authentication, which act as clients for SISF. The following figure illustrates this: 1 IPv6 Snooping Policy, IPv6 FHS Binding Table Content, and IPv6 Neighbor Discovery Inspection Configuring Switch Integrated Security Features 1