CLI Reference Guide-R04

Chapter 9 | General Security Measures
DHCPv6 Snooping
– 340 –
show ip dhcp
snooping binding
This command shows the DHCP snooping binding table entries.
Command Mode
Privileged Exec
Example
Console#show ip dhcp snooping binding
MAC Address IP Address Lease(sec) Type VLAN Interface
----------------- --------------- ---------- -------------------- ---- ---------
11-22-33-44-55-66 192.168.0.99 0 Dynamic-DHCPSNP 1 Eth 1/5
Console#
DHCPv6 Snooping
DHCPv6 snooping allows a switch to protect a network from rogue DHCPv6 servers
or other devices which send port-related information to a DHCPv6 server. This
information can be useful in tracking an IP address back to a physical port. This
section describes commands used to configure DHCPv6 snooping.
Table 61: DHCP Snooping Commands
Command Function Mode
ipv6 dhcp snooping Enables DHCPv6 snooping globally GC
ipv6 dhcp snooping option
remote-id
Enables insertion of DHCPv6 Option 37 relay agent
remote-id
GC
ipv6 dhcp snooping option
remote-id policy
Sets the information option policy for DHCPv6 client
packets that include Option 37 information
GC
ipv6 dhcp snooping vlan Enables DHCPv6 snooping on the specified VLAN GC
ipv6 dhcp snooping
max-binding
Sets the maximum number of entries which can be
stored in the binding database for an interface
IC
ipv6 dhcp snooping trust Configures the specified interface as trusted IC
clear ipv6 dhcp snooping
binding
Clears DHCPv6 snooping binding table entries from RAM PE
clear ipv6 dhcp snooping
statistics
Clears statistical counters for DHCPv6 snooping client,
server and relay packets
PE
show ipv6 dhcp snooping Shows the DHCPv6 snooping configuration settings PE
show ipv6 dhcp snooping
binding
Shows the DHCPv6 snooping binding table entries PE
show ipv6 dhcp snooping
statistics
Shows statistics for DHCPv6 snooping client, server and
relay packets
PE