C
HAPTER
27
| General Security Measures
DHCPv6 Snooping
– 913 –
ipv6 dhcp snooping
vlan
This command enables DHCPv6 snooping on the specified VLAN. Use the
no form to restore the default setting.
SYNTAX
[no] ipv6 dhcp snooping vlan {vlan-id | vlan-range}
vlan-id - ID of a configured VLAN (Range: 1-4093)
vlan-range - A consecutive range of VLANs indicated by the use a
hyphen, or a random group of VLANs with each entry separated by
a comma.
DEFAULT SETTING
Disabled
COMMAND MODE
Global Configuration
COMMAND USAGE
u When DHCPv6 snooping enabled globally using the ipv6 dhcp snooping
command, and enabled on a VLAN with this command, DHCPv6 packet
filtering will be performed on any untrusted ports within the VLAN as
specified by the ipv6 dhcp snooping trust command.
u When the DHCPv6 snooping is globally disabled, DHCPv6 snooping can
still be configured for specific VLANs, but the changes will not take
effect until DHCPv6 snooping is globally re-enabled.
u When DHCPv6 snooping is enabled globally, and then disabled on a
VLAN, all dynamic bindings learned for this VLAN are removed from the
binding table.
EXAMPLE
This example enables DHCP6 snooping for VLAN 1.
Console(config)#ipv6 dhcp snooping vlan 1
Console(config)#
RELATED COMMANDS
ipv6 dhcp snooping (910)
ipv6 dhcp snooping trust (914)
To Next Page