ECS4100 Series CLI Reference Guide-R07

Chapter 9 | General Security Measures
DHCPv6 Snooping
– 343 –
drop - Drops the client’s request packet instead of relaying it.
keep - Retains the Option 37 information in the client request, and
forwards the packets to trusted ports.
replace - Replaces the Option 37 remote-ID in the client’s request with the
relay agent’s remote-ID (when DHCPv6 snooping is enabled), and forwards
the packets to trusted ports.
Default Setting
drop
Command Mode
Global Configuration
Command Usage
When the switch receives DHCPv6 packets from clients that already include DHCP
Option 37 information, the switch can be configured to set the action policy for
these packets. The switch can either drop the DHCPv6 packets, keep the existing
information, or replace it with the switch’s relay agent information.
Example
This example configures the switch to keep existing remote-id option 37
information within DHCPv6 client packets and forward it.
Console(config)#ipv6 dhcp snooping option remote-id policy keep
Console(config)#
ipv6 dhcp snooping
vlan
This command enables DHCPv6 snooping on the specified VLAN. Use the no form
to restore the default setting.
Syntax
[no] ipv6 dhcp snooping vlan {vlan-id | vlan-range}
vlan-id - ID of a configured VLAN (Range: 1-4094)
vlan-range - A consecutive range of VLANs indicated by the use a hyphen,
or a random group of VLANs with each entry separated by a comma.
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
◆ When DHCPv6 snooping enabled globally using the ipv6 dhcp snooping
command, and enabled on a VLAN with this command, DHCPv6 packet