< Home

display dhcp snooping

Function

The display dhcp snooping command displays DHCP snooping running information.

Format

display dhcp snooping [ interface interface-type interface-number | vlan vlan-id | bridge-domain bd-id ]

Only the S5720-HI, S5730-HI, S6720-HI, S6730-H, S6730S-H, S6730-S, S6730S-S, S5732-H, S5731-S, S5731S-S, S5731S-H, S5731-H, S6720-EI, and S6720S-EI support the bridge-domain parameter.

Parameters

Parameter Description Value

interface interface-type interface-number

Displays DHCP snooping running information on a specified interface.

  • interface-type specifies the interface type.

  • interface-number specifies the interface number.

-

vlan vlan-id

Displays DHCP snooping running information in a specified VLAN.

The value is an integer that ranges from 1 to 4094.

bridge-domain bd-id

Displays DHCP snooping running information in a specified BD.

The BD ID must already exist.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

The display dhcp snooping command displays DHCP snooping running information. If no interface or VLAN is specified, global DHCP snooping running information is displayed. If an interface or a VLAN ID is specified, DHCP snooping running information of the interface or VLAN is displayed.

Example

# Display global DHCP snooping running information.

<HUAWEI> display dhcp snooping 
 DHCP snooping global running information   :                                     
 DHCPv4 snooping                            : Enable                              
 DHCPv6 snooping                            : Enable                              
 Static user max number                     : 1024                                
 Current static user number                 : 1                                   
 Dhcp user(dhcpv4/dhcpv6/nd) max number     : 4096
 Dhcp user(dhcpv4/dhcpv6) max number        : 3000
 Nd user max number                         : 1000
 Current dhcpv4 user number                 : 0
 Current dhcpv6 user number                 : 0
 Current nd user number                     : 0 
 Arp dhcp-snooping detect                   : Disable  (default)                  
 Alarm threshold                            : 100      (default)                  
 Check dhcp-rate                            : Disable  (default)                  
 Dhcp-rate limit(pps)                       : 100      (default)                  
 Alarm dhcp-rate                            : Disable  (default)                  
 Alarm dhcp-rate threshold                  : 100      (default)                  
 Discarded dhcp packets for rate limit      : 0                                   
 Bind-table autosave                        : Disable  (default)   
 Client position transfer allowed           : Enable   (default)                  
 DHCPv6 confirm-client online detection     : Enable   (default)
 DHCPv6 client online detection times       : 3        (default)
 DHCPv6 client online detection interval    : 180      (default)
 Check dhcpv6-rate                          : Disable  (default)
 Dhcpv6-rate limit(pps)                     : 100      (default)
 Alarm dhcpv6-rate                          : Enable
 Alarm dhcpv6-rate threshold                : 10
 Discarded dhcpv6 packets for rate limit    : 0
 DHCP snooping packet-flow log              : Disable  (default)
 DHCP snooping running information for interface GigabitEthernet0/0/1   :               

 DHCP snooping                              : Enable                  
 Trusted interface                          : No                                  
 Dhcp user(dhcpv4/dhcpv6/nd) max number     : 4096
 Current dhcpv4 user number                 : 0
 Current dhcpv6 user number                 : 0
 Current nd user number                     : 0 
 Check dhcp-giaddr                          : Enable                              
 Check dhcp-chaddr                          : Disable  (default)                  
 Alarm dhcp-chaddr                          : Disable  (default)                  
 Check dhcp-request                         : Disable  (default)                  
 Alarm dhcp-request                         : Disable  (default)                  
 Check dhcp-rate                            : Enable                              
 Dhcp-rate limit(pps)                       : 100                                 
 Alarm dhcp-rate                            : Enable                              
 Alarm dhcp-rate threshold                  : 100                                 
 Discarded dhcp packets for rate limit      : 0                                   
 Alarm dhcp-reply                           : Disable  (default)                  
 Check dhcpv6-rate                          : Enable
 Dhcpv6-rate limit(pps)                     : 100
 Alarm dhcpv6-rate                          : Enable
 Alarm dhcpv6-rate threshold                : 10
 Discarded dhcpv6 packets for rate limit    : 0
 Alarm dhcpv6-request                       : Enable
 Alarm dhcpv6-request threshold             : 100
 Discarded dhcpv6 packets for check request : 0 
 DHCPv6 snooping check relay-forward        : Enable
Table 1 Description of the display dhcp snooping command output

Item

Description

DHCPv4 snooping

Whether DHCPv4 snooping is enabled globally.

To enable DHCP snooping, run the dhcp snooping enable command.

DHCPv6 snooping

Whether DHCPv6 snooping is enabled globally.

To enable DHCP snooping, run the dhcp snooping enable command.

DHCP snooping

Whether DHCP snooping is enabled on an interface or in a VLAN.

To enable DHCP snooping, run the dhcp snooping enable command.

Static user max number

Maximum number of static users.

Current static user number

Number of current static users.

Dhcp user(dhcpv4/dhcpv6/nd) max number

Shared specifications of the DHCPv4 snooping, ND snooping, and DHCPv6 snooping binding tables.

Dhcp user(dhcpv4/dhcpv6) max number

Maximum number of DHCPv4 snooping and DHCPv6 snooping users that can be set using a command.

To configure this item, run the dhcp snooping max-user-number command. If this command is not configured, the item is not displayed.

Nd user max number

Maximum number of ND snooping users that can be set using a command.

To configure this item, run the nd snooping max-user-number command. If this command is not configured, the item is not displayed.

Current dhcpv4 user number

Number of currently online DHCPv4 users.

Current dhcpv6 user number

Number of currently online DHCPv6 users.

Current nd user number

Number of currently online ND users.

Arp dhcp-snooping detect

Whether association between ARP and DHCP snooping is enabled.

To enable association between ARP and DHCP snooping, run the arp dhcp-snooping-detect enable command.

Alarm threshold

Global alarm threshold for the number of discarded DHCP snooping messages.

To set the global alarm threshold for the number of discarded DHCP snooping messages, run the dhcp snooping alarm threshold command.

Check dhcp-rate

Whether a device is enabled to check the rate of sending DHCP messages.

To enable the device to check the rate of sending DHCP messages, run the dhcp snooping check dhcp-rate enable command.

Dhcp-rate limit(pps)

Rate limit of DHCP messages, in pps.

To set the rate limit of DHCP messages, run the dhcp snooping check dhcp-rate command.

Alarm dhcp-rate

Whether trap for checking the rate of sending DHCP messages to the processing unit is enabled.

To enable trap for checking the rate of sending DHCP messages to the processing unit, run the dhcp snooping alarm dhcp-rate enable command.

Alarm dhcp-rate threshold

Alarm threshold for the number of discarded DHCP messages. An alarm is generated if the number of discarded DHCP messages reaches the alarm threshold.

To set the alarm threshold for the number of discarded DHCP messages, run the dhcp snooping alarm dhcp-rate threshold command.

Discarded dhcp packets for rate limit

Number of discarded DHCP messages whose rate exceeds the rate limit.

Bind-table autosave

Whether a device is enabled to save the DHCP snooping binding table.

To enable the device to save the binding table, run the dhcp snooping user-bind autosave command.

Client position transfer allowed

Whether location transition is enabled for DHCP snooping users.

To enable location transition for DHCP snooping users, run the dhcp snooping user-transfer enable command.

DHCPv6 confirm-client online detection

Whether the confirm-client probing function of DHCPv6 snooping is enabled.

To configure the confirm-client probing function of DHCPv6 snooping, run the dhcpv6 snooping user-bind detect confirm-client enable command.

DHCPv6 client online detection times

Number of times that the DAD NS messages are sent for DHCPv6 snooping to detect whether the user is online.

To configure the number of times that the DAD NS messages are sent for DHCPv6 snooping to detect whether the user is online, run the dhcpv6 snooping user-bind detect retransmit command.

DHCPv6 client online detection interval

Interval at which the DAD NS messages are sent for DHCPv6 snooping to detect whether the user is online.

To configure the number of times that the DAD NS messages are sent for DHCPv6 snooping to detect whether the user is online, run the dhcpv6 snooping user-bind detect retransmit command.

Check dhcpv6-rate

Whether a device is enabled to check the rate of sending DHCPv6 messages.

To enable a device to check the rate of sending DHCPv6 messages, run the dhcp snooping check dhcpv6-rate enable command.

Dhcpv6-rate limit(pps)

Rate limit of DHCPv6 messages, in pps.

To configure the rate limit of DHCPv6 messages, run the dhcp snooping check dhcpv6-rate command.

Alarm dhcpv6-rate

Whether a device is enabled to generate an alarm when the rate of sending DHCPv6 messages to the processing unit exceeds the alarm threshold.

To enable the device to generate an alarm when the rate of sending DHCPv6 messages to the processing unit exceeds the alarm threshold, run the dhcp snooping alarm dhcpv6-rate enable command.

Alarm dhcpv6-rate threshold

Alarm threshold for the number of discarded DHCPv6 messages. An alarm is generated if the number of discarded DHCPv6 messages reaches the alarm threshold.

To configure the alarm threshold for the number of discarded DHCPv6 messages, run the dhcp snooping alarm dhcpv6-rate threshold command.

Discarded dhcpv6 packets for rate limit

Number of discarded DHCPv6 messages whose rate exceeds the rate limit.

DHCP snooping packet-flow log

Whether the log function is enabled for DHCP packet exchange:
  • Enable: The function is enabled.
  • Disable: The function is disabled.

To configure this function, run the dhcp snooping packet-flow log enable command.

Trusted interface

Whether an interface is a trusted interface.

To configure an interface as a trusted interface, run the dhcp snooping trusted command.

Check dhcp-giaddr

Whether a device is enabled to check the GIADDR field in a DHCP Request message.

To enable the device to check the GIADDR field in a DHCP Request message, run the dhcp snooping check dhcp-giaddr enable command.

Check dhcp-chaddr

Whether a device is enabled to check whether the CHADDR field in a DHCP Request message matches the source MAC address in the Ethernet frame header.

To enable the device to check whether the CHADDR field in a DHCP Request message matches the source MAC address in the Ethernet frame header, run the dhcp snooping check dhcp-chaddr enable command.

Alarm dhcp-chaddr

Whether a device is enabled to generate an alarm when the number of discarded DHCP Request messages with the CHADDR field different from the source MAC address in the Ethernet frame header exceeds the alarm threshold.

To enable the device to generate an alarm when the number of discarded DHCP Request messages with the CHADDR field different from the source MAC address in the Ethernet frame header exceeds the alarm threshold, run the dhcp snooping alarm enable command.

Check dhcp-request

Whether an interface is enabled to check DHCP Request messages.

To enable the interface to check DHCP Request messages, run the dhcp snooping check dhcp-request enable command.

Alarm dhcp-request

Whether a device is enabled to generate an alarm when the number of DHCP Request messages discarded within a specified period reaches the alarm threshold.

To enable the device to generate an alarm when the number of DHCP Request messages discarded within a specified period reaches the alarm threshold, run the dhcp snooping alarm enable command.

Alarm dhcp-reply

Whether a device is enabled to generate an alarm when an interface discards a DHCP Reply message from an untrusted interface.

To enable the device to generate an alarm when an interface discards a DHCP Reply message from an untrusted interface, run the dhcp snooping alarm enable command.

Alarm dhcpv6-request

Whether a device is enabled to generate an alarm when an interface discards a DHCPv6 Request message from an untrusted interface.

To enable the device to generate an alarm when an interface discards a DHCPv6 Request message from an untrusted interface, run the dhcp snooping alarm enable command.

Alarm dhcpv6-request threshold

Alarm threshold for the number of discarded DHCPv6 Request messages that are received from untrusted interfaces.

To configure the alarm threshold, run the dhcp snooping alarm threshold command.

Discarded dhcpv6 packets for check request

Number of discarded DHCPv6 messages whose rate exceeds the rate limit.

DHCPv6 snooping check relay-forward

Whether the function of discarding DHCPv6 Relay-Forward messages is enabled.

To configure this function, run the dhcpv6 snooping check relay-forward enable command.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >