Ip Dhcp Snooping Trust - Edge-Core ES4624-SFP Basic Management Manual

DHCPv6 Snooping to be configured in a port, the DHCPv6 packets of all ports can not be
forwarded directly and are copied to cpu to be processed and forwarded by DHCPv6
Snooping. After disable the global DHCPv6 Snooping function and all ports functions of
DHCPv6 Snooping, the DHCPv6 packets are forwarded directly and do not need to be
copied to cpu, so DHCPv6 Snooping will not process DHCPv6 packets any more.
Example: Enable the monitor function of DHCPv6 Snooping globally.
switch(config)#ipv6 dhcp snooping enable

33.3.10 ip dhcp snooping trust

Command: ipv6 dhcp snooping trust
no ipv6 dhcp snooping trust
Function: Set the port to the trusted port. The no command sets the port to non-trusted
port.
Parameters: None
Command Mode: Port mode
Default Settings: By default, the port is non-trusted port.
Usage Guide: When a port turns into a trusted port from a non-trusted port, the original
security policy of the port will be deleted that means clear all blackhole MAC or undo the
shutdown of this port. At the same time, it allows the DHCPv6 responding packets of this
port to be forwarded. When a port turns into a non-trusted port from a trusted port, forbid
the DHCPv6 responding packets to be forwarded and drop them.
Example: Set the port as the trusted port.
switch(config-if-ethernet1/1)# ipv6 dhcp snooping trust
664