ELTEX MES1000 User Manual

MES1000, MES2000 Ethernet Switches 87
5.15.4 DHCPv6 guard function configuration
The DHCPv6 guard feature prevents third-party DHCPv6 servers on the network and allows their use
only on trusted interfaces.
Global Configuration Mode Commands
Command line request in global configuration mode appears as follows:
console(config)#
Table 5.65—Global configuration mode commands
Command
Value/Default value
Action
ipv6 dhcp guard
/disabled
Enable DHCPv6 guard function management for the switch.
no ipv6 dhcp guard
Disable DHCPv6 guard function.
ipv6 dhcp guard vlan vlan
(1..4094)
Enable DHCPv6 guard function management within the
specified VLAN.
- vlan – VLAN number.
Ethernet Interface Configuration Mode Commands
Command line request in the interface configuration mode appears as follows:
console (config-if)#
Table 5.66—Ethernet interface configuration mode commands
Command
Value/Default value
Action
ipv6 dhcp guard device-
role { client | server }
-/client
Port operation mode selection:
- client – 'advertise' and 'relpy' messages are discarded
- server – 'advertise' and 'relpy' messages are filtered by the
rules.
ipv6 dhcp guard match
server accsess-list acl
(1..32) characters
Enable ACL for filtering DHCPv6 messages.
- acl – ACL name.
ipv6 dhcp guard match
reply prefix-list prefix-list
(1..32) characters
Enable prefix-list for filtering DHCPv6 messages.
- prefix-list – prefix-list name.
ipv6 dhcp guard trusted-
port
By default, all ports are
untrusted
Add port to the trusted list. Trusted ports allow all types of
messages.
no ipv6 dhcp guard
trusted-port
Delete port from trusted list.

ELTEX MES1000 Specifications

General

Brand	ELTEX
Model	MES1000
Category	Switch
Language	English