H3C SR8800-F Configuration Manual page 11

Configuring DHCPv6 flood attack protection ·········································································· 188
Enabling the DHCPv6 server to advertise IPv6 prefixes ·································································· 189
Enabling DHCPv6 logging on the DHCPv6 server ········································································· 189
Display and maintenance commands for DHCPv6 server ······························································· 189
DHCPv6 server configuration examples ······················································································ 190
Example: Configuring dynamic IPv6 prefix assignment ···························································· 190
Example: Configuring dynamic IPv6 address assignment ························································· 193
Configuring the DHCPv6 relay agent ················································ 195
About DHCPv6 relay agent ······································································································ 195
Typical application ··········································································································· 195
DHCPv6 relay agent operating process ················································································ 195
DHCPv6 relay agent tasks at a glance ························································································ 196
Enabling the DHCPv6 relay agent on an interface ········································································· 196
Specifying DHCPv6 servers on the relay agent ············································································ 196
Specifying the DHCPv6 server IP addresses ········································································· 196
Specifying DHCPv6 servers for a DHCPv6 address pool on the DHCPv6 relay agent ···················· 197
Specifying a gateway address for DHCPv6 clients ········································································ 198
Setting the DSCP value for DHCPv6 packets sent by the DHCPv6 relay agent ··································· 198
Specifying a padding mode for the Interface-ID option ··································································· 199
Configuring DHCPv6 relay security features ················································································ 199
Enabling the DHCPv6 relay agent to record relay entries ························································· 199
Enabling IPv6 release notification ······················································································· 199
Enabling client offline detection ·························································································· 200
Configuring DHCPv6 flood attack protection ·········································································· 200
Enabling the DHCPv6 relay agent to advertise IPv6 prefixes ··························································· 201
Display and maintenance commands for DHCPv6 relay agent ························································· 201
DHCPv6 relay agent configuration examples ··············································································· 202
Example: Configuring DHCPv6 relay agent ··········································································· 202
Configuring DHCPv6 snooping ························································ 204
About DHCPv6 snooping ········································································································· 204
Application of trusted and untrusted ports ············································································· 204
Restrictions and guidelines: DHCPv6 snooping configuration ·························································· 205
DHCPv6 snooping tasks at a glance ·························································································· 205
Configuring basic DHCPv6 snooping ·························································································· 205
Configuring support for Option 18 ······························································································ 206
Configuring support for Option 37 ······························································································ 206
Configuring DHCPv6 snooping entry auto backup ········································································· 206
Setting the maximum number of DHCPv6 snooping entries ····························································· 207
Enabling DHCPv6-REQUEST check ·························································································· 207
Configuring a DHCPv6 packet blocking port ················································································ 208
Enabling DHCPv6 snooping logging ··························································································· 208
Display and maintenance commands for DHCPv6 snooping ··························································· 209
Example: Configuring DHCPv6 snooping ···················································································· 209
Network configuration ······································································································· 209
Procedure ······················································································································ 210
Verifying the configuration ································································································· 210
Configuring MAC authentication ······················································ 211
About MAC authentication ······································································································· 211
User account policies ······································································································· 211
Authentication methods ···································································································· 212
VLAN assignment ············································································································ 212
ACL assignment ·············································································································· 214
User profile assignment ···································································································· 214
Periodic MAC reauthentication ··························································································· 215
Restrictions and guidelines: MAC authentication configuration ························································· 215
MAC authentication tasks at a glance ························································································· 215
Prerequisites for MAC authentication ························································································· 216
Enabling MAC authentication ···································································································· 216
Specifying a MAC authentication domain ···················································································· 216
vi