205Restrictions and guidelines: DHCPv6 snoopingconfigurationDHCPv6 snooping works between the DHCPv6 client and server, or between the DHCPv6 client andDHCPv6 relay agent.DHCPv6 snooping does not work between the DHCPv6 server and DHCPv6 relay agent.DHCPv6 snooping tasks at a glanceTasks at a glance(Required.) Configuring basic DHCPv6 snooping(Optional.) Configuring support for Option 18(Optional.) Configuring support for Option 37(Optional.) Configuring DHCPv6 snooping entry auto backup(Optional.) Setting the maximum number of DHCPv6 snooping entries(Optional.) Enabling DHCPv6-REQUEST check(Optional.) Configuring a DHCPv6 packet blocking port(Optional.) Enabling DHCPv6 snooping loggingConfiguring basic DHCPv6 snoopingRestrictions and guidelinesFollow these guidelines when you configure basic DHCPv6 snooping:• To make sure DHCPv6 clients can obtain valid IPv6 addresses, specify the ports connected toauthorized DHCPv6 servers as trusted ports. The trusted ports and the ports connected toDHCPv6 clients must be in the same VLAN.• If you configure DHCPv6 snooping settings on a Layer 2 Ethernet interface that is a memberport of a Layer 2 aggregate interface, the settings do not take effect unless the interface isremoved from the aggregation group.ProcedureTo configure basic DHCPv6 snooping:Step Command Remarks1. Enter system view. system-view N/A2. Enable DHCPv6 snooping. ipv6 dhcp snooping enable By default, DHCPv6 snooping isdisabled.3. Enter interface view. interface interface-typeinterface-numberThis interface must connect to theDHCPv6 server.4. Specify the port as a trustedport. ipv6 dhcp snooping trustBy default, all ports are untrustedports after DHCPv6 snooping isenabled.5. Return to system view. quit N/A
