HP 6125G HP 6125G & 6125G/XG Blade Switches Layer 3 - IP Services Conf - Page 62

Configuring DHCP snooping entries backup

Page 62 highlights

Step Command Remarks 5. Configure Option 82 in the non-user-defined padding format. Optional. By default, • Configure the padding format for • The padding format for Option 82 is Option 82: normal. dhcp-snooping information format • The code type for the circuit ID { normal | private private | sub-option depends on the padding standard | verbose [ node-identifier format of Option 82. Each field has its { mac | sysname | user-defined own code type. node-identifier } ] } • The code type for the remote ID • Configure the code type for the sub-option is hex. circuit ID sub-option: • Sub-option 9 is not enabled dhcp-snooping information circuit-id format-type { ascii | hex } Hex configuration applies to private • Configure the code type for the padding format only. remote ID sub-option: The code type configuration for the dhcp-snooping information circuit ID sub-option and remote ID remote-id format-type { ascii | hex } sub-option apply to non-user-defined • Enable sub-option 9: Option 82 only. dhcp-snooping information [ vlan For sub-option 9, when append strategy vlan-id ] sub-option sub-option-code is adopted, the sysname and the primary IP address of the Loopback0 interface are padded. When some other strategy is adopted, only the sysname is padded. 6. Configure user-defined Option 82. • Configure the padding content for the circuit ID sub-option: dhcp-snooping information [ vlan vlan-id ] circuit-id string circuit-id • Configure the padding content for the remote ID sub-option: dhcp-snooping information [ vlan vlan-id ] remote-id string { remote-id | sysname } • Configure the padding content for the sub-option 9: dhcp-snooping information [ vlan vlan-id ] sub-option sub-option-code [ string user-string& ] Optional. By default, • The padding content for the circuit ID sub-option depends on the padding format of Option 82. • The padding content for the remote ID sub-option depends on the padding format of Option 82. • Sub-option 9 is not padded. Configuring DHCP snooping entries backup DHCP snooping entries cannot survive a reboot. If the DHCP snooping device is rebooted, security modules (such as IP source guard) that use DHCP snooping entries to authenticate users will reject requests from clients until new entries are learned. The DHCP snooping entries backup feature enables you to store DHCP snooping entries in a file. When the DHCP snooping device reboots, it reads DHCP snooping entries from this file. After DHCP snooping is disabled with the undo dhcp-snooping command, the device will delete all DHCP snooping entries, including those stored in the file. 54

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165

54
Step
Command
Remarks
5.
Configure Option
82 in the
non-user-defined
padding format.
Configure the padding format for
Option 82:
dhcp-snooping information format
{
normal
|
private
private
|
standard
|
verbose
[
node
-
identifier
{
mac
|
sysname
|
user
-
defined
node-identifier
} ] }
Configure the code type for the
circuit ID sub-option:
dhcp-snooping information
circuit-id format-type
{
ascii
|
hex
}
Configure the code type for the
remote ID sub-option:
dhcp-snooping information
remote-id format-type
{
ascii
|
hex
}
Enable sub-option 9:
dhcp-snooping information
[
vlan
vlan-id
]
sub-option
sub-option-code
Optional.
By default,
The padding format for Option 82 is
normal
.
The code type for the circuit ID
sub-option depends on the padding
format of Option 82. Each field has its
own code type.
The code type for the remote ID
sub-option
is
hex
.
Sub-option 9 is not enabled
Hex configuration applies to private
padding format only.
The code type configuration for the
circuit ID sub-option and remote ID
sub-option apply to non-user-defined
Option 82 only.
For sub-option 9, when append strategy
is adopted, the sysname and the primary
IP address of the Loopback0 interface
are padded. When some other strategy
is adopted, only the sysname is padded.
6.
Configure
user-defined
Option 82.
Configure the padding content for the
circuit ID sub-option:
dhcp-snooping information
[
vlan
vlan-id
]
circuit-id string
circuit-id
Configure the padding content for the
remote ID sub-option:
dhcp
-
snooping information
[
vlan
vlan-id
]
remote-id string
{
remote-id
|
sysname
}
Configure the padding content for the
sub-option 9:
dhcp-snooping information
[
vlan
vlan-id
]
sub-option
sub-option-code
[
string
user-string
&<1-8> ]
Optional.
By default,
The padding content for the circuit
ID sub-option depends on the
padding format of Option 82.
The padding content for the
remote ID sub-option depends on
the padding format of Option 82.
Sub-option 9 is not padded.
Configuring DHCP snooping entries backup
DHCP snooping entries cannot survive a reboot. If the DHCP snooping device is rebooted, security
modules (such as IP source guard) that use DHCP snooping entries to authenticate users will reject
requests from clients until new entries are learned.
The DHCP snooping entries backup feature enables you to store DHCP snooping entries in a file. When
the DHCP snooping device reboots, it reads DHCP snooping entries from this file.
After DHCP snooping is disabled with the
undo
dhcp-snooping
command, the device will delete all
DHCP snooping entries, including those stored in the file.