982 DHCPv6 Snooping CommandsThe administrator can configure the rate and burst interval. Rate limiting isconfigured independently on each physical interface and may be enabled onboth trusted and untrusted interfaces. The rate limit is configurable in therange of 0-300 packets per second and the burst interval in the range of 1-15seconds.ipv6 dhcp snooping log-invalidUse the ipv6 dhcp snooping log-invalid command to configure the port tolog invalid received DHCP messages.Syntaxipv6 dhcp snooping log-invalidno ipv6 dhcp snooping log-invalidDefault ConfigurationBy default, invalid DHCP messages are not logged.Command ModesInterface Configuration modeUser GuidelinesAn invalid DHCP message is one that is received on an untrusted interfacethat is not a member of the VLAN over which the IP address (and optionallythe MAC address) has been learned. Receiving large number of invalidmessages may be an indication of an attack.Logging invalid messages can use valuable CPU resources if the switchreceives such messages at a high rate. To avoid allowing the switch to bevulnerable to a DoS attack, DHCP snooping only logs invalid messages if theuser has enabled logging. Logging is enabled on individual interfaces so thatonly messages on interfaces of interest are logged. To further protect thesystem, invalid message logging is rate limited to 1 per second.
