ECS4660-28F_Management Guide-R03

C HAPTER 29 | General Security Measures
DHCPv6 Snooping
– 1126 –
show ip dhcp
snooping binding
This command shows the DHCP snooping binding table entries.
COMMAND MODE
Privileged Exec
EXAMPLE
Console#show ip dhcp snooping binding
MAC Address IP Address Lease(sec) Type VLAN Interface
----------------- --------------- ---------- -------------------- ---- ---------
11-22-33-44-55-66 192.168.0.99 0 Dynamic-DHCPSNP 1 Eth 1/5
Console#
DHCPV6 SNOOPING
DHCPv6 snooping allows a switch to protect a network from rogue DHCPv6
servers or other devices which send port-related information to a DHCPv6
server. This information can be useful in tracking an IP address back to a
physical port. This section describes commands used to configure DHCPv6
snooping.
ipv6 dhcp snooping This command enables DHCPv6 snooping globally. Use the no form to
restore the default setting.
SYNTAX
[no] ipv6 dhcp snooping
DEFAULT SETTING
Disabled
Table 120: DHCP Snooping Commands
Command Function Mode
ipv6 dhcp snooping Enables DHCPv6 snooping globally GC
ipv6 dhcp snooping vlan Enables DHCPv6 snooping on the specified VLAN GC
ipv6 dhcp snooping
max-binding
Sets the maximum number of entries which can be
stored in the binding database for an interface
IC
ipv6 dhcp snooping trust Configures the specified interface as trusted IC
clear ipv6 dhcp snooping
binding
Clears DHCPv6 snooping binding table entries from
RAM
PE
clear ipv6 dhcp snooping
statistics
Clears statistical counters for DHCPv6 snooping
client, server and relay packets
PE
show ipv6 dhcp snooping Shows the DHCPv6 snooping configuration settings PE
show ipv6 dhcp snooping
binding
Shows the DHCPv6 snooping binding table entries PE
show ipv6 dhcp snooping
statistics
Shows statistics for DHCPv6 snooping client, server
and relay packets
PE