H3C SOHO IE4300, Command Reference Manual

Page: 1060 / 3296

87
Default
The role is DHCPv6 client for the device attached to the target interface or VLAN.
Views
DHCPv6 guard policy view
Predefined user roles
network-admin
Parameters
client : Sets the device role to DHCPv6 client.
server
: Sets the device role to DHCPv6 server.
Usage guidelines
The target interface or VLAN refers to the interface or VLAN to which a DHCPv6 guard policy is
applied. The device makes forwarding decisions based on the device role as follows:
•
Drops DHCPv6 replies received from the device with the device role of DHCPv6 client.
•
Forwards DHCP replies received from the device with the device role of DHCPv6 server only if
the packets pass the DHCPv6 guard check.
If the target interface or VLAN is attached to an authorized DHCPv6 server, set the device role to
DHCPv6 server for the authorized DHCPv6 server. If no authorized DHCP servers are attached to
the target interface or VLAN, set the device role to DHCPv6 client for devices attached to the target
interface or VLAN.
The
trust port
command has a higher priority than the
device-role
command. If you
configure both commands for a DHCPv6 guard policy, the
trust port
command takes effect.
Examples
# Set the role to DHCPv6 server for the device attached to the target interface or VLAN.
<Sysname> system-view
[
Sysname
]
ipv6 dhcp guard policy p1
[
Sysname-dhcp6-guard-policy-p1
]
device-role server
display ipv6 dhcp guard policy
Use
display ipv6 dhcp guard policy
to display information about DHCPv6 guard policies.
Syntax
display ipv6 dhcp guard policy [ policy-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
policy-name
: Displays detailed information about a DHCPv6 guard policy. This argument
specifies the name of a DHCPv6 guard policy, a case-insensitive string of 1 to 63 characters. If you
do not specify this argument, the command displays brief information about all DHCPv6 guard
policies.