enabling IPv6 security

[S891]

We are planning on enabling ipv6 First Hop Security. We are considering following options

- SISF  based device tracking

- RA Guard

- IPv6 DHCP Guard

a. Are these sufficient for access switches? Is there anything else we should considering SISF is comprehensive?

b. Does it requires DHCP snooping and ARP inspection to be enabled separately as well? I know DHCP snooping is part of SISF but I am not sure of ARP inspection. 

Thanks

[S891]

Any comments on this..

[Harold Ritter]

I would recommend going through the following CiscoLive session from my colleague Eric Vyncke on the topic of IPv6 security.

https://www.ciscolive.com/global/on-demand-library.html?search=vyncke#/session/1532112868571001tmcH

Regards,