dhcpv6 snooping relay-information enable

Function

The dhcpv6 snooping relay-information enable command enables Lightweight DHCPv6 Relay Agent (LDRA) for DHCPv6 snooping.

The undo dhcpv6 snooping relay-information enable command disables LDRA.

By default, LDRA is disabled for DHCPv6 snooping.

Format

dhcpv6 snooping relay-information enable [ trust ]

undo dhcpv6 snooping relay-information enable [ trust ]

Parameters

Parameter	Description	Value
trust	Configures the device to trust the received Relay-Forward messages. If this parameter is not specified, the device does not trust the received Relay-Forward messages.	-

Parameter

Description

Value

trust

Configures the device to trust the received Relay-Forward messages.

If this parameter is not specified, the device does not trust the received Relay-Forward messages.

Views

VLAN view

Default Level

2: Configuration level

Usage Guidelines

Use Scenario

In some scenarios, for example, interfaces in the same VLAN have different network access rights and QoS requirements, the DHCPv6 server must be able to detect user access locations, and assign corresponding access control and QoS policies. The DHCPv6 relay agent is usually configured on the gateway. The relay agent can record user access locations; however, if access devices are located between the relay agent and users, the relay agent cannot detect the access locations of users.

LDRA can meet the requirements of these scenarios. LDRA is configured on the user-side access device. The LDRA-enabled device can forward user access locations (such as the network-side interfaces on clients) to the DHCPv6 server. The DHCPv6 server delivers policies to users accordingly.

This command enables LDRA for DHCPv6 snooping and configures the handling methods for received Relay-Forward messages:

Trust: The device forwards the received Relay-Forward messages to the DHCPv6 server. This method is usually used when multiple LDRA-enabled devices are directly connected. If the downstream LDRA-enabled device trusts the Relay-Forward messages from the upstream LDRA-enabled device, this method can be used.
Untrust: The device discards the received Relay-Forward messages. This method is usually used when an LDRA-enabled device directly connects to users, and the users may send invalid Relay-Forward messages.

Prerequisites

DHCP snooping has been enabled using the dhcp snooping enable command.

Precautions

The LDRA function only records the client location information and forwards the information to the DHCPv6 server. The differentiated policies for IP address allocation, accounting, access control, and QoS are configured on the DHCPv6 server.

Example

# Enable LDRA for DHCPv6 snooping in VLAN10.

<HUAWEI> system-view
[HUAWEI] vlan 10
[HUAWEI-vlan10] dhcpv6 snooping relay-information enable