ECS4100 Series CLI Reference Guide-R07

Chapter 9 | General Security Measures
DHCPv6 Snooping
– 341 –
drop - Drops the client’s request packet instead of relaying it.
keep - Retains the Option 18 information in the client request, and
forwards the packets to trusted ports.
replace - Replaces the Option 18 remote-ID in the client’s request with the
relay agent’s interface-ID (when DHCPv6 snooping is enabled), and
forwards the packets to trusted ports.
Default Setting
drop
Command Mode
Global Configuration
Command Usage
When the switch receives DHCPv6 packets from clients that already include DHCP
Option 18 information, the switch can be configured to set the action policy for
these packets. The switch can either drop the DHCPv6 packets, keep the existing
information, or replace it with the switch’s relay agent information.
Example
This example configures the switch to keep existing remote-id option 18
information within DHCPv6 client packets and forward it.
Console(config)#ipv6 dhcp snooping option interface-id policy keep
Console(config)#
ipv6 dhcp snooping
option remote-id
This command enables the insertion of remote-id option 37 information into
DHCPv6 client messages. Remote-id option information such as the port attached
to the client, DUID, and VLAN ID is used by the DHCPv6 server to assign
preassigned configuration data specific to the DHCPv6 client. Use the no form of
the command to disable this function.
Syntax
[no] ipv6 dhcp snooping option remote-id
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
◆ DHCPv6 provides a relay mechanism for sending information about the switch
and its DHCPv6 clients to the DHCPv6 server. Known as DHCPv6 Option 37, it