dhcpv6 relay access-limit vlan any

Function

The dhcpv6 relay access-limit vlan any command configures the maximum number of access DHCPv6 clients on a DHCPv6 relay interface. The configured maximum number applies to DHCPv6 clients that go online through single or double VLANs that do not have such a limit configured.

The undo dhcpv6 relay access-limit vlan any command deletes the maximum number of access DHCPv6 clients on a DHCPv6 relay interface.

By default, the maximum number of access DHCPv6 clients is not limited on DHCPv6 relay interfaces. Only the maximum number of DHCPv6 clients on the entire device is limited.

Format

dhcpv6 relay access-limit limit-number vlan any

undo dhcpv6 relay access-limit [ limit-number ] vlan any

Parameters

Parameter	Description	Value
limit-number	Specifies the maximum number of access DHCPv6 clients on a DHCPv6 relay interface.	The value is an integer ranging from 0 to 65536.

Parameter

Description

Value

limit-number

Specifies the maximum number of access DHCPv6 clients on a DHCPv6 relay interface.

The value is an integer ranging from 0 to 65536.

Views

100ge sub-interface view, 10GE sub-interface view, 200GE sub-interface view, 25GE sub-interface view, 400GE sub-interface view, 40GE sub-interface view, 50GE sub-interface view, Eth-Trunk sub-interface view, GE sub-interface view, Global VE sub-interface view, VE sub-interface view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
dhcp	write

Usage Guidelines

Usage Scenario

To limit the maximum number of access DHCPv6 clients during network planning or service adjustment, run the dhcpv6 relay access-limit command.

The dhcpv6 relay access-limit limit-number vlan any command configures the maximum number of DHCPv6 clients that can go online through single or double VLANs that do not have such a limit configured. This configuration is not counted in the 16 VLAN ranges allowed. Run this command to limit the maximum number of access DHCPv6 clients on a DHCPv6 relay interface in a specified VLAN. For example, if DHCPv6 clients send double-tagged packets to go online, each pair of VLAN tags identifies a VLAN. Run the dhcpv6 relay access-limit 1 vlan any command to configure a DHCPv6 relay interface to allow only one client that sends double-tagged VLAN packets to go online. This configuration protects the device against packets with changing MAC addresses and DUIDs.

Configuration Impact

This command takes effect for subsequent DHCPv6 clients that go online. The maximum number of online DHCPv6 clients is not limited.

Precautions

If the dhcpv6 relay access-limit command is run with a VLAN range specified, and then the undo dhcpv6 relay access-limit command is run with a smaller VLAN range specified, the first VLAN range is divided into two parts. After the VLAN range specified in the dhcpv6 relay access-limit command is divided into 16 parts, the undo dhcpv6 relay access-limit command can no longer be run.

Example

# Configure GE 0/1/0.2 to allow a maximum of 2 DHCPv6 clients that send double-tagged packets carrying PE-VLAN 200 and any CE-VLAN ID in the range 100-200 to go online, a maximum of 3 DHCPv6 clients that send double-tagged packets carrying PE-VLAN 200 and any CE-VLAN ID in the range 300-400 to go online, and only 1 DHCPv6 client that sends double-tagged packets carrying any PE-VLAN ID and CE-VLAN ID other than the ones specified to go online.

<HUAWEI> system-view
[~HUAWEI] interface GigabitEthernet 0/1/0.2
[~HUAWEI-GigabitEthernet0/1/0.2] dhcpv6 relay access-limit 1 vlan any