KB.15.15

Authenticating the DHCPv6 client

DHCPv6 client authentication allows the configuration of authentication options such as mode and

key-chain. For more information, see “DHCPv6 client” (page 29).

Syntax:

[no] ipv6 dhcp-client authentication

[ mode [ md5 ] | key-chain chain-name-str ]

Allows the configuration of authentication options. The authentication information

carried in the option can be used to identify the source of a DHCPv6 message and

to confirm the message has not been tampered with.

The no form of the ipv6 dhcp-client authentication command disables

authentication.

mode [ md5 ]

The only supported mode is MD5-based HMAC.

key-chain chain-name-str

The name of the key chain. The key chain must have been created with an ID

and a duration before it can be entered as the chain-name-str. See chapter

“Key Management System" in the Access Security Guide for your switch for

more information about creating key chains.

Viewing DHCP client information

To view DHCP client authentication or statistical information, enter the show dhcpv6 client

command with the appropriate option. To view information about a specific VLAN, enter the vlan

command with the VLAN name or identifier.

Syntax:

show ipv6 dhcp-client [ authentication [ vlan vid ] | statistics [ vlan

vid ] ]

Displays information about IPv6 DHCP client authentication parameters or DHCP

client statistics.

authentication

Displays authentication information such as enabled or disabled, mode,

key-chain, and key-id

statistics

Displays information such as transmitted packets, received packets, and

authentication failures.

16 IPv6 Addressing Configuration