Chapter 9
| General Security Measures
DHCPv4 Snooping
– 288 –
ip dhcp snooping
information option
remote-id
This command sets the remote ID to the switch’s IP address, MAC address, or
arbitrary string, TR-101 compliant node identifier, or removes VLAN ID from the end
of the TR101 field. Use the
no
form to restore the default setting.
Syntax
ip dhcp snooping information option
remote-id
{
ip-address
[
encode
{
ascii
|
hex
}] |
mac-address
[
encode
{
ascii
|
hex
}] |
string
string
|
tr101
{
node-identifier
{
ip
|
sysname
} |
no-vlan-field
}
no ip dhcp snooping information option remote-id
[
ip-address
encode
] | [
mac-address
encode
] | [
tr101 no-vlan-field
]
mac-address
- Inserts a MAC address in the remote ID sub-option for the
DHCP snooping agent (that is, the MAC address of the switch’s CPU).
ip-address
- Inserts an IP address in the remote ID sub-option for the DHCP
snooping agent (that is, the IP address of the management interface).
encode
- Indicates encoding in ASCII or hexadecimal.
string - An arbitrary string inserted into the remote identifier field.
(Range: 1-32 characters)
tr101
node-identifier
- The remote ID generated by the switch is based on
TR-101 syntax (R-124, Access_Node_ID).
ip
- Specifies the switch’s IP address as the node identifier.
sysname
- Specifies the system name as the node identifier.
tr101
no-vlan-field
- Do not add “:VLAN” in TR101 field for untagged
packets.
Default Setting
MAC address: hexadecimal
tr101 no-vlan-field: disabled
Command Mode
Global Configuration
Command Usage
The format for TR101 option 82 is: “<IP> eth <SID>/<PORT>[:<VLAN>]”. Note that
the SID (Switch ID) is always 0. By default the PVID is added to the end of the TR101
field for untagged packets. For tagged packets, the VLAN ID is always added. Use
the
ip dhcp snooping information option remote-id tr101 no-vlan-field
command to remove the VLAN ID from the end of the TR101 field for untagged
packets. Use the
no
form of this command to add the PVID for untagged packets at
the end of the TR101 field.