dhcpv6 relay strict-check interface-info

Function

The dhcpv6 relay strict-check interface-info command enables a DHCPv6 relay interface to check the physical information of DHCPv6 messages.

The undo dhcpv6 relay strict-check interface-info command disables a DHCPv6 relay interface from checking the physical information of DHCPv6 messages.

By default, DHCPv6 relay interfaces are not allowed to check the physical information of DHCPv6 messages.

Format

dhcpv6 relay strict-check interface-info

undo dhcpv6 relay strict-check interface-info

Parameters

None

Views

100GE interface view, 10GE interface view, 25GE interface view, 400GE interface view, 40GE interface view, 50GE interface view, Eth-Trunk interface view, FlexE sub-interface view, FlexE interface view, GE optical interface view, GE interface view, GE electrical interface view, Global VE sub-interface view, VE sub-interface view, Sub-interface view

Default Level

2: Configuration level

Task Name and Operations

Task Name Operations
dhcp write

Usage Guidelines

Usage Scenario

If the location of a WLAN user changes, the physical information (user access interface, PE-VLAN ID, and CE-VLAN ID) of DHCPv6 messages from that user will also change. In this case, the DHCPv6 relay agent does not need to check the physical information of DHCPv6 messages.

However, the physical information of DHCPv6 messages from fixed network users does not change unless an error occurs. To allow a DHCPv6 relay interface to check the physical information of DHCPv6 messages for security purposes, run the dhcpv6 relay strict-check interface-info command.

Configuration Impact

After this command is run on a DHCPv6 relay interface, the interface checks the physical information of received DHCPv6 messages. If the physical information is different from that in DHCPv6 client entries, the interface discards the messages.

Example

# Enable GE 0/1/0.10 to check the physical information of DHCPv6 messages.
<HUAWEI> system-view
[~HUAWEI] interface GigabitEthernet 0/1/0.10
[~HUAWEI-GigabitEthernet0/1/0.10] dhcpv6 relay strict-check interface-info
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >