Configuration guidelines
Make sure one or more of the following features are configured to prevent ND untrusted interfaces from dropping all received ND messages:
IPv6 source guard static bindings.
To make the bindings effective for ND attack detection, you must specify the vlan vlan-id option in the ipv6 source binding command, and enable ND attack detection for the same VLAN.
DHCPv6 snooping.
ND snooping.