Table of Contents
Advertisement
Syntax
ipv6 dhcp snooping
no ipv6 dhcp snooping
Default Configuration
By default, DHCP snooping is not enabled.
Command Modes
Global Configuration mode
User Guidelines
The DHCP snooping application processes incoming DHCP messages. For
RELEASE and DECLINE messages from a DHCPv6 client and
RECONFIGURE messages from a DHCPv6 server received on an untrusted
interface, the application compares the receive interface and VLAN with the
client's interface and VLAN in the bindings database. If the interfaces do not
match, the application logs the event and drops the packet. If configured, for
valid client messages, DHCP snooping additionally compares the source
MAC address to the DHCP client hardware address. If there is a mismatch,
DHCP snooping logs a message and drops the packet. The network
administrator can disable this option using the no ip v6 dhcp snooping verify
mac-address for DHCPv6. DHCP snooping always forwards client messages
on trusted interfaces within the VLAN. If DHCP relay or/and DHCP server
are enabled simultaneously with DHCP snooping, the DHCP client message
will be sent to the DHCP relay or/and DHCP server to process further.
Example
console(config)#ipv6 dhcp snooping
ipv6 dhcp snooping vlan
Use the ipv6 dhcp snooping vlan command to globally enable IPv6 DHCP on
a set of VLANs. Use the no form of the command to globally disable IPv6
DHCP snooping on a set of VLANs.
354
Layer 2 Switching Commands
Advertisement
Table of Contents
