Edge-Core ECS3510-10PD, Management Manual

Page: 920 / 1494

C
HAPTER
24
| General Security Measures
DHCPv6 Snooping
– 920 –
either drop, keep or remove option 37 information in incoming DCHPv6
packets. Packets are processed as follows:
■
If an incoming packet is a DHCPv6 request packet with option 37
information, it will modify the option 37 information according to
settings specified with ipv6 dhcp snooping option remote-id policy
command.
■
If an incoming packet is a DHCPv6 request packet without option 37
information, enabling the DHCPv6 snooping information option will
add option 37 information to the packet.
■
If an incoming packet is a DHCPv6 reply packet with option 37
information, enabling the DHCPv6 snooping information option will
remove option 37 information from the packet.
◆ When this switch inserts Option 37 information in DHCPv6 client
request packets, the switch’s MAC address (hexadecimal) is used for
the remote ID.
E
XAMPLE
This example enables the DHCPv6 Snooping Remote-ID Option.
Console(config)#ipv6 dhcp snooping option remote-id
Console(config)#
ipv6 dhcp snooping
option remote-id
policy
This command sets the remote-id option policy for DHCPv6 client packets
that include Option 37 information. Use the no form to disable this
function.
S
YNTAX
ipv6 dhcp snooping option remote-id policy { drop | keep |
replace }
no ipv6 dhcp snooping option remote-id policy
drop - Drops the client’s request packet instead of relaying it.
keep - Retains the Option 37 information in the client request, and
forwards the packets to trusted ports.
replace - Replaces the Option 37 remote-ID in the client’s request
with the relay agent’s remote-ID (when DHCPv6 snooping is
enabled), and forwards the packets to trusted ports.
D
EFAULT
S
ETTING
drop
C
OMMAND
M
ODE
Global Configuration