Recording Ip-To-Mac Mappings Of Dhcpv6 Clients; Enabling Dhcpv6 Snooping; Configuring A Dhcpv6 Snooping Trusted Port - HP 3600 v2 Series Configuration Manual

that they do not forward reply messages from any DHCPv6 servers. This ensures that the DHCPv6 client
can obtain an IPv6 address from the authorized DHCPv6 server only.
As shown in
ports as untrusted.

Recording IP-to-MAC mappings of DHCPv6 clients

DHCPv6 snooping reads DHCPv6 messages to create and update DHCPv6 snooping entries, including
MAC addresses of clients, IPv6 addresses obtained by the clients, ports that connect to DHCPv6 clients,
and VLANs to which the ports belong. You can use the display ipv6 dhcp snooping user-binding
command to view the IPv6 address obtained by each client, so you can manage and monitor the clients'
IPv6 addresses.

Enabling DHCPv6 snooping

To allow clients to obtain IPv6 addresses from an authorized DHCPv6 server, enable DHCPv6 snooping
globally and configure trusted and untrusted ports properly. To record DHCPv6 snooping entries for a
VLAN, enable DHCPv6 snooping for the VLAN.
To enable DHCPv6 snooping:
Step
1. Enter system view.
2. Enable DHCPv6 snooping
globally.
3. Enter VLAN view.
4. Enable DHCPv6 snooping for the
VLAN.

Configuring a DHCPv6 snooping trusted port

After enabling DHCPv6 snooping globally, you can specify trusted and untrusted ports for a VLAN as
needed. A DHCPv6 snooping trusted port normally forwards received DHCPv6 packets. A DHCPv6
snooping untrusted port discards any DHCPv6 reply message received from a DHCPv6 server. Upon
receiving a DHCPv6 request from a client in the VLAN, the DHCPv6 snooping device forwards the
packet through trusted ports rather than any untrusted port in the VLAN, reducing network traffic.
You must specify a port connected to an authorized DHCPv6 server as trusted to make sure that DHCPv6
clients can obtain valid IPv6 addresses. The trusted port and the ports connected to the DHCPv6 clients
must be in the same VLAN.
If a Layer 2 Ethernet port is added to an aggregation group, the DHCPv6 snooping configuration of the
interface will not take effect until the interface quits from the aggregation group.
To configure a DHCPv6 snooping trusted port:
Step
1. Enter system view.
Figure 71, configure the port that connects to the DHCPv6 server as a trusted port, and other
Command
system-view
ipv6 dhcp snooping enable
vlan vlan-id
ipv6 dhcp snooping vlan enable
Command
system-view
168
Remarks
N/A
Disabled by default.
N/A
Optional.
Disabled by default.
Remarks
N/A