Table 61: Dhcp Snooping Commands; Dhcpv6 Snooping - Edge-Core ECS4120-28F Reference Manual

DHCPv6 Snooping

ipv6 dhcp snooping
DHCPv6 snooping allows a switch to protect a network from rogue DHCPv6 servers
or other devices which send port-related information to a DHCPv6 server. This
information can be useful in tracking an IP address back to a physical port. This
section describes commands used to configure DHCPv6 snooping.

Table 61: DHCP Snooping Commands

Command
ipv6 dhcp snooping
ipv6 dhcp snooping option
remote-id
ipv6 dhcp snooping option
remote-id policy
ipv6 dhcp snooping vlan
ipv6 dhcp snooping
max-binding
ipv6 dhcp snooping trust
clear ipv6 dhcp snooping
binding
clear ipv6 dhcp snooping
statistics
show ipv6 dhcp snooping
show ipv6 dhcp snooping
binding
show ipv6 dhcp snooping
statistics
This command enables DHCPv6 snooping globally. Use the no form to restore the
default setting.
Syntax
[no] ipv6 dhcp snooping
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
◆
Network traffic may be disrupted when malicious DHCPv6 messages are
received from an outside source. DHCPv6 snooping is used to filter DHCPv6
messages received on an unsecure interface from outside the network or fire
Chapter 9
Function
Enables DHCPv6 snooping globally
Enables insertion of DHCPv6 Option 37 relay agent
remote-id
Sets the information option policy for DHCPv6 client
packets that include Option 37 information
Enables DHCPv6 snooping on the specified VLAN
Sets the maximum number of entries which can be
stored in the binding database for an interface
Configures the specified interface as trusted
Clears DHCPv6 snooping binding table entries from RAM PE
Clears statistical counters for DHCPv6 snooping client,
server and relay packets
Shows the DHCPv6 snooping configuration settings
Shows the DHCPv6 snooping binding table entries
Shows statistics for DHCPv6 snooping client, server and
relay packets
– 321 –
| General Security Measures
DHCPv6 Snooping
Mode
GC
GC
GC
GC
IC
IC
PE
PE
PE
PE