3.9.1 DHCPv6 Snooping Configuration

Use this command to enable/disable DHCPv6 snooping mode operation and configure port trust mode.

Command Syntax:

ipv6 dhcp snooping 
ipv6 dhcp snooping nh-unknown { drop | allow }
ipv6 dhcp snooping trust
Table 3-38. Command Description

Argument

Description

Parameter

drop

Drop packets with unknown IPv6 extension headers.

allow

Allow packets with unknown IPv6 extension headers.

Default

N.A

Mode

Global Configuration mode and Port List Configuration mode

Usage

To globally enable DHCPv6 snooping, use ipv6 dhcp snooping ipv6 dhcp snooping nh-unknown { drop | allow } command. To globally disable DHCP snooping, use the ‘no’ form of this command.

To configure a port as trusted for DHCPv6 snooping purposes, use ipv6 dhcp snooping trust. To configure a port as untrusted, use the ‘no’ form of this command.

Example

Example 1:

Enable DHCPv6 snooping and allow packets with unknown IPv6 extension headers.

# configure terminal
(config)# ipv6 dhcp snooping
(config)# ipv6 dhcp snooping nh-unknown allow

Example 2:

Enable DHCPv6 snooping trust on port 1.

# configure terminal
(config)# interface GigabitEthernet 1/1
(config-if)# ipv6 dhcp snooping trust