ECS4100 Series CLI Reference Guide-R07

Chapter 9 | General Security Measures
DHCPv6 Snooping
– 344 –
filtering will be performed on any untrusted ports within the VLAN as specified
by the ipv6 dhcp snooping trust command.
◆ When the DHCPv6 snooping is globally disabled, DHCPv6 snooping can still be
configured for specific VLANs, but the changes will not take effect until DHCPv6
snooping is globally re-enabled.
◆ When DHCPv6 snooping is enabled globally, and then disabled on a VLAN, all
dynamic bindings learned for this VLAN are removed from the binding table.
Example
This example enables DHCP6 snooping for VLAN 1.
Console(config)#ipv6 dhcp snooping vlan 1
Console(config)#
Related Commands
ipv6 dhcp snooping (337)
ipv6 dhcp snooping trust (345)
ipv6 dhcp snooping
max-binding
This command sets the maximum number of entries which can be stored in the
binding database for an interface. Use the no form to restore the default setting.
Syntax
ipv6 dhcp snooping max-binding count
no ipv6 dhcp snooping max-binding
count - Maximum number of entries. (Range: 1-5)
Default Setting
5
Command Mode
Interface Configuration (Ethernet, Port Channel)
Example
This example sets the maximum number of binding entries to 1.
Console(config)#interface ethernet 1/1
Console(config-if)#ipv6 dhcp snooping max-binding 1
Console(config-if)#