C
HAPTER
25
| General Security Measures
DHCPv6 Snooping
– 914 –
either drop, keep or remove option 37 information in incoming DCHPv6
packets. Packets are processed as follows:
â–
If an incoming packet is a DHCPv6 request packet with option 37
information, it will modify the option 37 information according to
settings specified with ipv6 dhcp snooping option remote-id policy
command.
â–
If an incoming packet is a DHCPv6 request packet without option 37
information, enabling the DHCPv6 snooping information option will
add option 37 information to the packet.
â–
If an incoming packet is a DHCPv6 reply packet with option 37
information, enabling the DHCPv6 snooping information option will
remove option 37 information from the packet.
â—† When this switch inserts Option 37 information in DHCPv6 client
request packets, the switch’s MAC address (hexadecimal) is used for
the remote ID.
EXAMPLE
This example enables the DHCPv6 Snooping Remote-ID Option.
Console(config)#ipv6 dhcp snooping option remote-id
Console(config)#
RELATED COMMANDS
show ipv6 dhcp snooping (918)
ipv6 dhcp snooping
option remote-id
policy
This command sets the remote-id option policy for DHCPv6 client packets
that include Option 37 information. Use the no form to disable this
function.
SYNTAX
ipv6 dhcp snooping option remote-id policy {drop | keep |
replace}
no ipv6 dhcp snooping option remote-id policy
drop - Drops the client’s request packet instead of relaying it.
keep - Retains the Option 37 information in the client request, and
forwards the packets to trusted ports.
replace - Replaces the Option 37 remote-ID in the client’s request
with the relay agent’s remote-ID (when DHCPv6 snooping is
enabled), and forwards the packets to trusted ports.
DEFAULT SETTING
drop
To Next Page
Loading...
Need help?
General
