Web Management Guide-R01

Chapter 12 | Security Measures
DHCPv6 Snooping
– 362 –
■
If an incoming packet is a DHCPv6 request packet without option 37
information, enabling the DHCPv6 snooping information option will
add option 37 information to the packet.
■
If an incoming packet is a DHCPv6 reply packet with option 37
information, enabling the DHCPv6 snooping information option will
remove option 37 information from the packet.
■
When this switch inserts Option 37 information in DHCPv6 client request
packets, the switch’s MAC address (hexadecimal) is used for the remote ID.
◆ DHCPv6 Snooping Option Policy – Sets the remote-id option policy for
DHCPv6 client packets that include Option 37 information.
When the switch receives DHCPv6 packets from clients that already include
DHCP Option 37 information, the switch can be configured to set the action
policy for these packets. The switch can either drop the DHCPv6 packets, keep
the existing information, or replace it with the switch’s relay agent information.
■
Drop – Drops the client’s request packet instead of relaying it. (This is the
default policy.)
■
Keep – Retains the Option 82 information in the client request, and
forwards the packets to trusted ports.
■
Replace – Replaces the Option 37 remote-ID in the client’s request with the
relay agent’s remote-ID (when DHCPv6 snooping is enabled), and forwards
the packets to trusted ports.
Web Interface
To configure global settings for DHCPv6 Snooping:
1. Click Security, DHCP Snooping6.
2. Select Configure Global from the Step list.
3. Select the required options for the DHCPv6 snooping process and for the
DHCPv6 snooping information options.
4. Click Apply
Figure 224: Configuring Global Settings for DHCPv6 Snooping