12.1. DHCPv6 Snooping Commands

12.1.1. clear dhcpv6 snooping bindings learning

Command Purpose

Use the clear dhcpv6 snooping bindings learning privileged EXEC command on the switch to clear the dynamic DHCPv6 binding items.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

clear dhcpv6 snooping bindings ( learning | manual ) ( ipv6 IP-ADDRESS | mac MAC-ADDRESS | vlan VLAN-ID | interface IFNAME | )

Parameter

Parameter Description

Parameter Value

ipv6 IP-ADDRESS

Clear the binding entry with the IPv6 address

IPv6 Address

mac MAC-ADDRESS

Clear the binding entry with the MAC address

MAC address

vlan VLAN-ID

Clear the binding entry with the VLAN

1-4094

interface IFNAME

Clear the binding entry with the Interface

Support physical/aggregation ports

Command Mode

Privileged EXEC

Default

No default is defined.

Usage

This command is used to clear DHCPv6 snooping binding.

Examples

This example shows how to clear all DHCPv6 snooping binding learning items:

Switch# clear dhcpv6 snooping bindings learning

12.1.2. clear dhcpv6 snooping statistics

Command Purpose

Use the clear dhcpv6 snooping statistics privileged EXEC command on the switch to clear the DHCPv6 snooping statistics counters.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

clear dhcpv6 snooping statistics

Command Mode

Privileged EXEC

Default

No default is defined.

Usage

This command is used to clear DHCPv6 snooping statistics.

Examples

This example shows how to clear the DHCPv6 snooping statistics counters:

Switch# clear dhcpv6 snooping statistics

Related Commands

show dhcpv6 snooping statistics

12.1.3. dhcpv6 snooping

Command Purpose

Use the dhcpv6 snooping Global Config command on the switch to globally enable DHCPv6 snooping.

Use the no form of this command to return to the default setting.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

dhcpv6 snooping

no dhcpv6 snooping

Command Mode

Global Config

Default

DHCPv6 snooping is disabled.

Usage

For any DHCPv6 snooping configuration to take effect, you must globally enable DHCPv6 snooping. DHCPv6 snooping is not active until you enable snooping on a VLAN by using the dhcpv6 snooping vlan global configuration command.

Examples

This example shows how to enable DHCPv6 snooping:

Switch# configure terminal
Switch(config)# dhcpv6 snooping

You can verify your settings by entering the show dhcpv6 snooping config privileged EXEC command:

Related Commands

dhcpv6 snooping vlan

show dhcpv6 snooping config

12.1.4. dhcpv6 snooping binding

Command Purpose

Use the dhcpv6 snooping binding Global Config command on the switch to configure the DHCPv6 snooping binding database and to add binding entries to the database.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

dhcpv6 snooping binding mac MAC-ADDRESS vlan VLAN-ID ipv6 IP-ADDRESS interface IFNAME expiry SECONDS

no dhcpv6 snooping bindings ( ipv6 IP-ADDRESS | mac MAC-ADDRESS | vlan VLAN-ID | interface IFNAME | )

Parameter

Parameter Description

Parameter Value

mac MAC-ADDRESS

Specify a MAC address

MAC address

vlan VLAN-ID

Specify a VLAN number.

1-4094

ipv6 IP-ADDRESS

Specify an IPv6 address

IPv6 Address

interface IFNAME

Specify an interface on which to add or delete a binding entry

Support physical/aggregation ports

expiry SECONDS

Specify the interval (in seconds) after which the binding entry is no longer valid. The range is 0 to 86400

0-86400 seconds

Command Mode

Global Config

Default

No default database is defined.

Usage

Use this command when you are testing or debugging the switch.

In the DHCPv6 snooping binding database, each database entry, also referred to a binding, has an IP address, an associated MAC address, the lease time, the interface to which the binding applies, and the VLAN to which the interface belongs.

Use the show dhcpv6 snooping binding privileged EXEC command to display the configured bindings.

Examples

This example shows how to generate a DHCPv6 binding with an expiration time of 1000 seconds on a port in VLAN 1:

Switch# configure terminal
Switch(config)# dhcpv6 snooping binding mac 0058.3f0c.01ef vlan 1 ipv6 2001:1::1 interface eth-0-1 expiry 1000

Related Commands

show dhcpv6 snooping binding

12.1.5. dhcpv6 snooping database

Command Purpose

Use the dhcpv6 snooping database Global Config command on the switch to configure the DHCPv6 snooping binding database agent. Use the no form of this command to reset the write-delay value.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

dhcpv6 snooping database auto-save interval SECONDS

Parameter

Parameter Description

Parameter Value

interval SECONDS

Specify the interval (in seconds) that how long to save the binding database.

15-2000 seconds

Command Mode

Global Config

Default

Default interval is 600 seconds.

Usage

The DHCPv6 snooping database is save as flash:/dhcpv6snooping.

Examples

The following is sample output from the dhcpv6 snooping database command:

Switch# configure terminal
Switch(config)# dhcpv6 snooping database auto-save interval 120

Related Commands

dhcpv6 snooping

dhcpv6 snooping binding

12.1.6. dhcpv6 snooping remote-id format

Command Purpose

Use the dhcpv6 snooping remote-id format Global Config command on the switch to configure the format of dhcpv6 snooping remote-id. Use the no form of this command to set the format of dhcpv6 snooping remote-id to default format.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

dhcpv6 snooping remote-id format { vlan | ifname | duid }

no dhcpv6 snooping remote-id format

Parameter

Parameter Description

Parameter Value

vlan

The ID of the vlan attached by client

-

ifname

The name of the interface received packet from client

-

duid

Insert system`s DUID in remote-id

-

Command Mode

Global Config

Default

Default format is duid::ifname

Usage

The format of remote-id can be a combination of vlan, interface name, DUID. This command specifies the existing keywords in the combination.

Examples

The following example shows how to specify the format of remote-id:

Switch# configure terminal
Switch(config)# dhcpv6 snooping remote-id format duid vlan ifname

Related Commands

dhcpv6 snooping remote-id option

12.1.7. dhcpv6 snooping remote-id option

Command Purpose

Use the dhcpv6 snooping remote-id option Global Config command on the switch to globally enable insert dhcpv6 snooping remote-id. Use the no form of this command to globally disable insert dhcpv6 snooping remote-id.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

dhcpv6 snooping remote-id option

no dhcpv6 snooping remote-id option

Command Mode

Global Config

Default

Insert remote-id is disabled

Usage

None

Examples

The following example shows how to enable remote-id option:

Switch# configure terminal
Switch(config)# dhcpv6 snooping remote-id option

Related Commands

dhcpv6 snooping remote-id format

12.1.8. dhcpv6 snooping trust

Command Purpose

Use the dhcpv6 snooping trust interface configuration command on the switch to configure a port as trusted for DHCPv6 snooping purposes.

Use the no form of this command to return to the default setting.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

dhcpv6 snooping trust

no dhcpv6 snooping trust

Command Mode

Interface Configuration

Default

DHCPv6 snooping trust is disabled.

Usage

Configure as trusted ports those that are connected to a DHCPv6 server or to other switches or routers. Configure as entrusted ports those that are connected to DHCPv6 clients.

Examples

This example shows how to enable DHCPv6 snooping trust on a port:

Switch# configure terminal
Switch(config)# interface eth-0-1
Switch(config-if)# dhcpv6 snooping trust

Related Commands

show dhcpv6 snooping trusted-sources

12.1.9. dhcpv6 snooping vlan

Command Purpose

Use the dhcpv6 snooping vlan Global Config command on the switch to enable DHCPv6 snooping on a VLAN. Use the no form of this command to return to the default setting.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

dhcpv6 snooping vlan VLAN-RANGE

no dhcpv6 snooping vlan VLAN-RANGE

Parameter

Parameter Description

Parameter Value

VLAN-RANGE

Specify a VLAN ID or a range of VLANs on which to enable DHCP snooping.

1-4094

Command Mode

Global Config

Default

DHCPv6 snooping is disabled on all VLANs.

Usage

You can enter a single VLAN ID identified by VLAN ID number, a series of VLAN IDs separated by commas, a range of VLAN IDs separated by hyphens, or a range of VLAN IDs separated by entering the starting and ending VLAN IDs separated by a space.

You must first globally enable DHCPv6 snooping before enabling DHCPv6 snooping on a VLAN.

Examples

This example shows how to enable DHCPv6 snooping on VLAN 10:

Switch# configure terminal
Switch(config)# dhcpv6 snooping vlan 10

Related Commands

show dhcpv6 snooping config

12.1.10. debug dhcpv6 snooping

Command Purpose

Use this command to turn on the debug switches of dhcpv6 snooping module.

To restore the default, use the no form of this command

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

debug dhcpv6 snooping ( events | error | dump | packet | all )

no debug dhcpv6 snooping ( events | error | dump | packet | all )

Parameter

Parameter Description

Parameter Value

events

Snooping events

-

error

Error DHCPv6 message

-

packet

DHCPv6 message fields

-

dump

Dump message in hex format

-

all

Turn all debugging on

-

Command Mode

Privileged EXEC

Default

None

Usage

Use command “terminal monitor” to make debug messages print on the VTY immediately.

Use command “show logging buffer” to check the debug messages in the logging buffer.

Examples

The following is sample to open dhcpv6 snooping debug switches:

Switch# debug dhcpv6 snooping all

Related Commands

terminal monitor

show logging buffer

12.1.11. show dhcpv6 snooping binding

Command Purpose

Use the show dhcpv6 snooping binding privileged EXEC command to display the DHCPv6 snooping binding database and configuration information for all interfaces on a switch.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

show dhcpv6 snooping binding ((all | manual | learning )( ipv4 IP-ADDRESS | mac MAC-ADDRESS | vlan VLAN-ID | interface IFNAME | ) summary | )

Parameter

Parameter Description

Parameter Value

all

Display all entries

-

manual

Display static entries

-

learning

Display dynamic entries

-

mac MAC-ADDRESS

Specify MAC address

MAC address

vlan VLAN-ID

Specify a VLAN number.

1-4094

ipv4 IP-ADDRESS

Specify an IP address

IPv4 Address

interface IFNAME

Specify an interface on which to add or delete a binding entry

Support physical/aggregation ports

summary

Display summary information of DHCPv6 snooping bindings

-

Command Mode

Privileged EXEC

Default

None

Usage

If DHCPv6 snooping is enabled and an interface changes to the down state, the switch does not delete the statically configured bindings.

Examples

The following is sample output from the show dhcpv6 snooping binding command:

Switch# show dhcpv6 snooping binding all

DHCPv6 snooping binding table:
VLAN MAC Address    Interface  Lease(s)   IPv6 Address
============================================================
1    0001.0001.0001 eth-0-2    static     1:1::1:1
Switch# show dhcpv6 snooping binding summary
Total 1 DHCPv6 snooping binding entries
    0 learning entry, 1 configured entry

Related Commands

dhcpv6 snooping binding

12.1.12. show dhcpv6 snooping config

Command Purpose

Use the show dhcpv6 snooping privileged EXEC command to display the DHCPv6 snooping configuration.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

show dhcpv6 snooping config

Command Mode

Privileged EXEC

Default

None

Usage

This command is used to display the configuration of DHCPv6 snooping.

Examples

The following is sample output from the show dhcpv6 snooping config command:

Switch# show dhcpv6 snooping config

dhcpv6 snooping service: enabled
dhcpv6 snooping switch: enabled
dhcpv6 snooping vlan 3

Related Commands

dhcpv6 snooping

dhcpv6 snooping vlan

12.1.13. show dhcpv6 snooping trusted-sources

Command Purpose

Use the show dhcpv6 snooping trusted-sources privileged EXEC command to display the DHCPv6 snooping trusted interface.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

show dhcpv6 snooping trusted-sources

Command Mode

Privileged EXEC

Default

None

Usage

This command is used to display the trusted interface of DHCPv6 snooping.

Examples

The following is sample output from the show dhcpv6 snooping trusted-sources command:

Switch# show dhcpv6 snooping trusted-source

List of DHCPv6 snooping trusted interface(s):
============================================================
eth-0-20

Related Commands

dhcpv6 snooping trust

12.1.14. show dhcpv6 snooping statistics

Command Purpose

Use the show dhcpv6 snooping statistics privileged EXEC command to display DHCPv6 snooping statistics.

Prerequisites

Platform

Software

License

Comments

AQ-N3000

7.0

Base

AQ-N5000

7.0

Base

AQ-N6000

7.0

Base

Command Syntax

show dhcpv6 snooping statistics

Command Mode

Privileged EXEC

Default

None

Usage

This command is used to display the statistics of DHCPv6 snooping.

Examples

The following is sample output from the show dhcpv6 snooping statistics command:

Switch# show dhcpv6 snooping statistics

DHCPv6 snooping statistics:
============================================================
DHCPv6 packets                            137
Packets forwarded                         137
Packets invalid                           0
Packets dropped                           0

Related Commands

clear dhcpv6 snooping statistics