Home » Dell Manuals » Hubs & Switches » Dell N3200-ON » Manual Viewer

Dell N3200-ON EMC Networking N-Series Switches CLI Reference Guide version 6.7 - Page 385

ipv6 dhcp snooping trust, Syntax, Default Configuration, Command Modes, User Guidelines

Get Dell N3200-ON PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 385 highlights

Logging invalid messages can use valuable CPU resources if the switch receives such messages at a high rate. To avoid allowing the switch to be vulnerable to a DoS attack, DHCP snooping only logs invalid messages if the user has enabled logging. Logging is enabled on individual interfaces so that only messages on interfaces of interest are logged. To further protect the system, invalid message logging is rate limited to 1 per second. ipv6 dhcp snooping trust Use the ipv6 dhcp snooping trust command to configure an interface as trusted. Use the no form of the command to return the interface to the default configuration. Syntax ipv6 dhcp snooping trust no ipv6 dhcp snooping trust Default Configuration By default, interfaces are untrusted. Command Modes Interface Configuration mode (Ethernet and port-channel) User Guidelines Configuring an interface as trusted disables DHCP snooping address validation checking and exposes the port to IPv6 DHCP DoS attacks. DHCP snooping must be enabled globally and on the VLAN for which the port is a member for this command to have an effect. Configuring a port as trusted indicates that the port is connected to an IPv6 DHCP server or to a trusted device. Configuring a port as untrusted indicates that the switch should firewall IPv6 DHCP messages and act as if the port is connected to an untrusted device. Use the ipv6 verify source command to disable traffic from untrusted sources on an interface. Layer 2 Switching Commands 385

Section	Page
Dell EMC Networking CLI	97
Introduction	97
Command Groups	97
Mode Types	103
Layer 2 Commands	106
ACL	106
MAC Address Table	107
MAC Notification	108
Auto-VoIP	109
CDP Interoperability	109
DHCP L2 Relay	110
DHCP Snooping	111
Dynamic ARP Inspection	112
Ethernet Configuration	112
Ethernet CFM	114
Ethernet Ring Protection	116
Green Ethernet	117
GVRP	118
IGMP Snooping	119
IGMP Snooping Querier	120
Interface Error Disable and Auto Recovery	120
IP Addressing	121
IPv6 ACL	122
IPv6 MLD Snooping	123
IPv6 MLD Snooping Querier	123
IP Source Guard	124
iSCSI Optimization	124
Link Dependency	125
LLDP	125
Loop Protection	126
MLAG	127
Multicast VLAN Registration	128
Port Channel	129
Port Monitor	130
QoS	131
Spanning Tree	136
UDLD	138
VLAN	139
Switchport Voice VLAN	141
Multiple MAC Registration Protocol	142
Multiple VLAN Registration Protocol	142
Security Commands	143
AAA	143
Administrative Profiles	146
E-mail Alerting	146
RADIUS	147
TACACS+	151
802.1x	152
Captive Portal	154
Denial of Service	156
Management ACL	157
Password Management	158
SSH	159
Data Center Commands	160
OpenFlow	160
Layer 3 Routing Commands	161
ARP (IPv4)	161
BFD	162
BGP	162
BGP Routing Policy	171
DHCP Server and Relay Agent (IPv4)	173
DHCPv6	174
DHCPv6 Snooping	175
DVMRP	177
GMRP	177
IGMP	178
IGMP Proxy	179
IP Helper/DHCP Relay	179
IP Routing	181
IPv6 Routing	183
Loopback Interface	188
Multicast	188
IPv6 Multicast	190
OSPF	192
OSPFv3	196
IPv6 Policy-Based Routing	200
Router Discovery Protocol	201
Routing Information Protocol	202
Tunnel Interface	203
Unicast Reverse Path Forwarding	203
Virtual Router	204
Virtual Router Redundancy	204
Virtual Router Redundancy Protocol version 3 Commands	206
Switch Management Commands	207
Application Deployment	207
Auto-Install	208
CLI Macro	209
Clock	209
Command Line Configuration Scripting	210
DHCP Client	211
HiveAgent	211
Line	212
MACsec	213
PHY Diagnostics	215
Power Over Ethernet (PoE)	215
RMON	216
Serviceability Tracing	217
sFlow	220
SNMP	220
Support Assist	222
SYSLOG	222
System Management	224
Telnet Server	227
Time Ranges	228
USB Flash Drive	228
User Interface	228
Web Server	229
Using the CLI	231
Introduction	231
Entering and Editing CLI Commands	231
History Buffer	232
Negating Commands	233
Show Command	233
CLI Output Filtering	234
Command Completion	235
Short Form Commands	236
Keyboard Shortcuts	236
Parameters	237
Command Scripting	238
CLI Command Notation Conventions	238
Interface Naming Conventions	239
Operating on Multiple Interfaces (Ranges)	242
Examples	243
Entering Network Addresses	245
CLI Command Modes	247
User Exec Mode	248
Privileged Exec Mode	248
Global Configuration Mode	249
Pre-configuration	250
Interface Configuration Modes	251
Identifying the Switch and Command Mode from the System Prompt	252
Navigating CLI Command Modes	252
Starting the CLI	263
Using CLI Functions and Tools	264
Configuration Management	264
Management Interface Security	266
Management ACL	270
Other CLI Tools and Capabilities	270
Layer 2 Switching Commands	279
ACL Commands	281
ACL Logging	281
How to Build ACLs	282
ip access-list	284
Syntax	284
Default Configuration	284
Command Mode	284
User Guidelines	284
deny \| permit (IP ACL)	284
Syntax	285
Default Configuration	289
Command Mode	289
User Guidelines	289
Command History	291
Example	291
deny \| permit (Mac-Access-List-Configuration)	291
Syntax	291
Default Configuration	293
Command Mode	293
User Guidelines	293
Command History	294
Example	294
ip access-group	294
Syntax	294
Default Configuration	295
Command Mode	295
User Guidelines	295
Examples	295
Command History	296
mac access-group	296
Syntax	296
Default Configuration	296
Command Mode	296
User Guidelines	296
Example	297
mac access-list extended	297
Syntax	297
Default Configuration	298
Command Mode	298
User Guidelines	298
Example	298
mac access-list extended rename	298
Syntax	298
Default Configuration	298
Command Mode	298
User Guidelines	299
Example	299
remark	299
Syntax	299
Default Configuration	299
Command Mode	299
User Guidelines	300
Command History	300
Example	300
service-acl input	300
Syntax	301
Default Configuration	301
Command Mode	301
User Guidelines	301
Example	301
show service-acl interface	301
Syntax	302
Default Configuration	302
Command Mode	302
User Guidelines	302
Example	302
show access-lists interface	302
Syntax	302
Examples	303
show ip access-lists	303
Syntax	303
Command History	304
Examples	304
show mac access-lists	306
Syntax	306
Default Configuration	307
Command Mode	307
User Guidelines	307
Command History	307
Example	307
MAC Address Table Commands	309
clear mac address-table	309
Syntax	310
Default Configuration	310
Command Mode	310
User Guidelines	310
Example	310
Command History	310
mac address-table aging-time	310
Syntax	310
Default Configuration	311
Command Mode	311
User Guidelines	311
Example	311
mac address-table multicast forbidden address	311
Syntax	311
Default Configuration	312
Command Mode	312
User Guidelines	312
Examples	312
mac address-table static	312
Syntax	312
Default Configuration	313
Command Mode	313
User Guidelines	313
Example	313
switchport port-security (Global Configuration)	313
Syntax	313
Default Configuration	314
Command Mode	314
User Guidelines	314
Command History	315
Example	316
switchport port-security (Interface Configuration)	317
Syntax	317
Default Configuration	318
Command Mode	318
User Guidelines	318
Command History	321
Example	321
show mac address-table multicast	322
Syntax	322
Default Configuration	322
Command Mode	322
User Guidelines	322
Example	323
Command History	323
show mac address-table	323
Syntax	323
Default Configuration	324
Command Mode	324
User Guidelines	324
Example	324
show mac address-table address	324
Syntax	324
Default Configuration	325
Command Mode	325
User Guidelines	325
Example	325
show mac address-table count	325
Syntax	325
Default Configuration	326
Command Mode	326
User Guidelines	326
Example	326
show mac address-table dynamic	326
Syntax	326
Default Configuration	326
Command Mode	327
User Guidelines	327
Example	327
show mac address-table interface	327
Syntax	327
Default Configuration	327
Command Mode	327
User Guidelines	328
Example	328
show mac address-table static	328
Syntax	328
Default Configuration	328
Command Mode	328
User Guidelines	329
Example	329
show mac address-table vlan	329
Syntax	329
Default Configuration	329
Command Mode	329
User Guidelines	329
Example	329
show port-security	330
Syntax	330
Default Configuration	330
Command Mode	330
User Guidelines	330
Command History	332
Example	332
MAC Notification Commands	333
mac address-table notification change	333
Syntax	333
Default Configuration	333
Command Mode	333
User Guidelines	333
Example	335
Command History	335
snmp trap mac-notification change	335
Syntax	335
Default Configuration	335
Command Mode	335
User Guidelines	336
Example	336
Command History	336
show mac address-table notification change	336
Syntax	336
Default Configuration	336
Command Mode	337
User Guidelines	337
Example	337
Command History	338
Auto-VoIP Commands	339
show switchport voice	339
Syntax	340
Default Configuration	340
Command Mode	340
User Guidelines	340
Examples	340
switchport voice detect auto	342
Syntax	342
Default Configuration	342
Command Mode	342
User Guidelines	342
Example	342
CDP Interoperability Commands	343
clear isdp counters	343
Syntax	343
Default Configuration	343
Command Mode	343
User Guidelines	343
Example	343
clear isdp table	343
Syntax	343
Default Configuration	344
Command Mode	344
User Guidelines	344
Example	344
isdp advertise-v2	344
Syntax	344
Default Configuration	344
Command Mode	344
User Guidelines	344
Example	344
isdp enable	345
Syntax	345
Default Configuration	345
Command Mode	345
User Guidelines	345
Example	345
isdp holdtime	345
Syntax	346
Default Configuration	346
Command Mode	346
User Guidelines	346
Example	346
isdp timer	346
Syntax	346
Default Configuration	347
Command Mode	347
User Guidelines	347
Example	347
show isdp	347
Syntax	347
Default Configuration	347
Command Mode	347
User Guidelines	347
Example	347
show isdp entry	348
Syntax	348
Default Configuration	348
Command Mode	348
User Guidelines	348
Example	348
show isdp interface	349
Syntax	349
Default Configuration	349
Command Mode	349
User Guidelines	349
Example	349
show isdp neighbors	350
Syntax	350
Default Configuration	350
Command Mode	350
User Guidelines	350
Example	350
show isdp traffic	351
Syntax	351
Default Configuration	351
Command Mode	351
User Guidelines	351
Example	351
DHCP Layer 2 Relay Commands	353
dhcp l2relay (Global Configuration)	353
Syntax	353
Default Configuration	353
Command Mode	353
User Guidelines	353
Example	354
dhcp l2relay (Interface Configuration)	354
Syntax	354
Default Configuration	354
Command Mode	354
User Guidelines	354
Example	354
dhcp l2relay circuit-id	354
Syntax	354
Default Configuration	355
Command Mode	355
User Guidelines	355
Example	355
dhcp l2relay remote-id	355
Syntax	355
Default Configuration	355
Command Mode	356
User Guidelines	356
Example	356
dhcp l2relay trust	356
Syntax	356
Default Configuration	356
Configuration Mode	356
User Guidelines	356
Example	356
dhcp l2relay vlan	356
Syntax	357
Default Configuration	357
Command Mode	357
User Guidelines	357
Example	357
show dhcp l2relay all	357
Syntax	357
Default Configuration	357
Command Mode	357
User Guidelines	358
Example	358
show dhcp l2relay interface	358
Syntax	358
Default Configuration	358
Command Mode	358
User Guidelines	359
Command History	359
Example	359
show dhcp l2relay stats interface	359
Syntax	359
Default Configuration	359
Command Mode	359
User Guidelines	359
Example	359
show dhcp l2relay agent-option vlan	360
Syntax	360
Default Configuration	360
Command Mode	360
User Guidelines	360
Example	360
show dhcp l2relay vlan	361
Syntax	361
Default Configuration	361
Command Mode	361
User Guidelines	361
Example	361
show dhcp l2relay circuit-id vlan	361
Syntax	361
Default Configuration	362
Command Mode	362
User Guidelines	362
Example	362
show dhcp l2relay remote-id vlan	362
Syntax	362
Default Configuration	362
Command Mode	363
User Guidelines	363
Example	363
clear dhcp l2relay statistics interface	363
Syntax	363
Default Configuration	363