A DHCP unique identifier (DUID) uniquely identifies a DHCPv6 device (DHCPv6 client, server, or relay agent). A DHCPv6 device adds its DUID in a sent packet.

This command displays output only after the DHCPv6 process is running on the device.

Examples

# Display the DUID of the local device.

<Sysname> display ipv6 dhcp duid

The DUID of this device: 0003000100e0fc005552.

display ipv6 dhcp flood-protection

Use display ipv6 dhcp flood-protection to display information about DHCPv6 flood attack protection entries.

Syntax

display ipv6 dhcp flood-protection slot slot-number [ mac-address mac-address [ interface interface-type interface-number ] | state { check | restrain } [ verbose ] | statistics | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

mac-address mac-address: Specifies a MAC address in the format of H-H-H. If you specify this option, the command displays detailed information about the DHCPv6 flood attack protection entries for the specified MAC address. If you do not specify this option, the command displays brief information about DHCPv6 flood attack protection entries.

interface interface-type interface-number: Displays information about the DHCPv6 flood attack protection entries for the specified interface.

state { check | restrain }: Displays information about DHCPv6 flood attack protection entries in the specified state. The check keyword specifies the check state. The restrain keyword specifies the restrain state.

slot slot-number: Specifies a card by its slot number.

statistics: Displays statistics for DHCPv6 flood attack protection entries.

verbose: Displays detailed information about DHCPv6 flood attack protection entries.

Usage guidelines

If you do not specify any parameters, this command displays brief information about all DHCPv6 flood attack protection entries on the device.

Examples

# Display brief information about DHCPv6 flood attack protection entries on a slot.

<Sysname> display ipv6 dhcp flood-protection slot 1

Global DHCPv6 flood protection: Enabled

DHCPv6 flood protection threshold: 100 packets/ 2000 milliseconds

Index MAC address UDP port SVLAN/CVLAN State

0 a036-9f5c-74e4 547 4091/4094 Restrain

1 c434-6b3f-0001 547 4091/4094 Check

-------------------------------------------------------------------------------

Total entries: 2

# Displays statistics for DHCPv6 flood attack protection entries on a slot.

<Sysname> display ipv6 dhcp flood-protection slot 1 statistics

Total entries: 2

Entries in check state: 1

Entries in restrain state: 1

# Display detailed information about DHCPv6 flood attack protection entries for MAC address c434-6b3f-0001 on a slot.

<Sysname> display ipv6 dhcp flood-protection slot 1 mac-address c434-6b3f-0001

Interface: Ten-GigabitEthernet3/0/1

MAC address: c434-6b3f-0001

Hardware status: Succeeded

SVLAN/CVLAN: 4091/4094

State: Check

Entry created at: 2018/01/08 16:12:36

Total passed packets: 1

Total restrain packets: 0

-------------------------------------------------------------------------------

Total entries: 1

# Display detailed information about DHCPv6 flood attack protection entries on slot 1.

<Sysname>display ipv6 dhcp flood-protection slot 1 verbose

Interface: Ten-GigabitEthernet3/0/1

MAC address: 78a8-3e93-0216

Hardware status: Succeeded

SVLAN/CVLAN: -/-

State: Restrain

Entry created at: 2021/06/24 11:23:36

Total passed packets: 1

Total restrain packets: 7

Interface: Ten-GigabitEthernet3/0/2

MAC address: 78a8-3e93-0217

Hardware status: Succeeded

SVLAN/CVLAN: -/-

State: Restrain

Entry created at: 2021/06/24 11:23:37

Total passed packets: 1

Total restrain packets: 6

Interface: Ten-GigabitEthernet3/0/3

MAC address: 78a8-3e93-0218

Hardware status: Succeeded

SVLAN/CVLAN: -/-

State: Restrain

Entry created at: 2021/06/24 11:23:36

Total passed packets: 1

Total restrain packets: 7

------------------------------------------------------------------------------

Total entries: 3

Table 1 Command output

Field	Description
Global DHCPv6 flood protection	Whether global DHCPv6 flood attack protection is enabled
DHCPv6 flood protection threshold: xxx packets/ yyy milliseconds	The DHCPv6 packet count limit is xxx and the detection duration is yyy milliseconds.
Index	Sequence number of the DHCPv6 flood attack protection entry.
MAC address	Source MAC address in DHCPv6 packets.
UDP port	Destination UDP port number in DHCPv6 packets.
SVLAN/CVLAN	Inner VLAN ID and outer VLAN ID in DHCPv6 packets. If a DHCPv6 packet does not belong to any VLAN, this field displays a hyphen (-).
State	State of the DHCPv6 flood attack protection entry: · Check. · Restrain.
Interface	Interface that received DHCPv6 packets.
Hardware status	Result of issuing the entry to the hardware: · Succeeded—Succeeded in issuing the entry to the hardware. · Failed—Failed to issue the entry to the hardware because of a device failure or insufficient hardware resources. · N/A—The entry was not issued to the hardware because the packet was not an attack packet. · Not support—DHCPv6 attack protection is not supported in hardware.
Entry created at	Time when the DHCPv6 flood attack protection entry was created. The entry is in check state when it is created.
Total passed packets	Number of DHCP packets that have been passed through when the DHCPv6 flood attack protection entry is in check state.
Total restrain packets	Number of dropped DHCP packets when the DHCPv6 flood attack protection entry is in restrain state.
Total entries	Total number of DHCPv6 flood attack protection entries.
Entries in check state	Total number of DHCPv6 flood attack protection entries in check state.
Entries in restrain state	Total number of DHCPv6 flood attack protection entries in restrain state.

‌

Related commands

ipv6 dhcp flood-protection aging-time

ipv6 dhcp flood-protection enable

ipv6 dhcp flood-protection threshold

reset ipv6 dhcp flood-protection

display ipv6 dhcp interface-rate-suppression

Use display ipv6 dhcp interface-rate-suppression display information about interface-based DHCPv6 attack suppression entries.

Syntax

display ipv6 dhcp interface-rate-suppression slot slot-number [ interface interface-type interface-number | state { check | restrain } [ verbose ] | statistics | verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Displays detailed information about the DHCPv6 attack suppression entry for the specified interface.

state { check | restrain }: Displays information about interface-based DHCPv6 attack suppression entries in the specified state. The check keyword specifies the check state. The restrain keyword specifies the restrain state.

slot slot-number: Specifies a card by its slot number.

statistics: Displays interface-based DHCPv6 attack suppression statistics.

verbose: Displays detailed information about interface-based DHCPv6 attack suppression entries.

Usage guidelines

If you do not specify any parameters, this command displays brief information about all interface-based DHCPv6 attack suppression entries on the device.

Examples

# Display brief information about interface-based DHCPv6 attack suppression entries.

<Sysname> display ipv6 dhcp interface-rate-suppression

DHCPv6 attack suppression threshold: 100 packets/ 2000 milliseconds

Index Interface State

0 XGE3/0/1 Restrain

1 XGE3/0/2 Check

2 XGE3/0/3 Restrain

-------------------------------------------------------------------------------

Total entries: 3

# Display interface-based DHCPv6 attack suppression statistics.

<Sysname> display ipv6 dhcp interface-rate-suppression statistics

Interfaces enabled with DHCPv6 attack suppression: 3

Entries in check state: 2

Entries in restrain state: 1

# Display detailed information about the DHCPv6 attack suppression entry for Ten-GigabitEthernet 3/0/1.

<Sysname> display ipv6 dhcp interface-rate-suppression interface Ten-GigabitEthernet 3/0/1

Interface: Ten-GigabitEthernet3/0/1

Hardware status: Succeeded

State: Restrain

Entry created at: 2018/07/08 15:51:50

Total passed packets: 2

Total restrain packets: 3

# Display brief information about interface-based DHCPv6 attack suppression entries on a slot.

<Sysname> display ipv6 dhcp interface-rate-suppression slot 1

DHCPv6 attack suppression threshold: 100 packets/ 2000 milliseconds

Index Interface State

0 XGE3/0/1 Restrain

1 XGE3/0/2 Check

2 XGE3/0/3 Restrain

-------------------------------------------------------------------------------

Total entries: 3

# Display detailed information about the DHCPv6 attack suppression entry for Ten-GigabitEthernet 3/0/1 on a slot.

<Sysname> display ipv6 dhcp interface-rate-suppression slot 1 interface ten-gigabitethernet 3/0/1

Interface: Ten-GigabitEthernet3/0/1

Hardware status: Succeeded

State: Restrain

Entry created at: 2018/07/08 15:51:50

Total passed packets: 2

Total restrain packets: 3

# Display interface-based DHCPv6 attack suppression statistics on slot 1.

<Sysname> display ipv6 dhcp interface-rate-suppression slot 1 statistics

Interfaces enabled with DHCPv6 attack suppression: 3

Entries in check state: 2

Entries in restrain state: 1

# Display detailed information about interface-based DHCPv6 attack suppression entries on slot 1.

<Sysname>display ipv6 dhcp interface-rate-suppression slot 1 verbose

Interface: Ten-GigabitEthernet3/0/1

Hardware status: Succeeded

State: Restrain

Entry created at 2021/06/24 11:23:36

Total passed packets: 7

Total restrain packets: 0

Interface: Ten-GigabitEthernet3/0/2

Hardware status: Succeeded

State: Restrain

Entry created at 2021/06/24 11:23:37

Total passed packets: 6

Total restrain packets: 0

Interface: Ten-GigabitEthernet3/0/3

Hardware status: Succeeded

State: Restrain

Entry created at 2021/06/24 11:23:36

Total passed packets: 7

Total restrain packets: 0

------------------------------------------------------------------------------

Total entries: 3

Table 2 Command output

Field	Description
DHCPv6 attack suppression threshold: xxx packets/ yyy milliseconds	The DHCPv6 packet count limit is xxx and the detection duration is yyy milliseconds.
Index	Sequence number of the interface-based DHCPv6 attack suppression entry.
State	State of the interface-based DHCPv6 attack suppression entry: · Check. · Restrain.
Interface	Interface that received DHCPv6 packets.
Hardware status	Result of issuing the entry to the hardware: · Succeeded—Succeeded in issuing the entry to the hardware. · Failed—Failed to issue the entry to the hardware because of a device failure or insufficient hardware resources. · N/A—The entry was not issued to the hardware because the packet was not an attack packet. · Not support—DHCPv6 attack protection is not supported in hardware.
Entry created at	Time when the interface-based DHCPv6 attack suppression entry was created.
Total passed packets	Number of forwarded DHCP packets when the DHCPv6 flood attack suppression entry is in restrain state.
Total restrain packets	Number of dropped DHCP packets when the DHCPv6 flood attack suppression entry is in restrain state.
Total entries	Total number of interface-based DHCPv6 attack suppression entries.
Interfaces enabled with DHCPv6 attack suppression	Total number of interfaces on which DHCPv6 attack suppression is enabled.
Check state count	Total number of interface-based DHCPv6 attack suppression entries in check state.
Restrain state count	Total number of interface-based DHCPv6 attack suppression entries in restrain state.

‌

Related commands

ipv6 dhcp interface-rate-suppression aging-time

ipv6 dhcp interface-rate-suppression enable

ipv6 dhcp interface-rate-suppression threshold

reset ipv6 dhcp interface-rate-suppression

display ipv6 dhcp rate-limit

Use display ipv6 dhcp rate-limit to display packet statistics for the DHCPv6 packet rate-limiting feature.

Syntax

display ipv6 dhcp rate-limit slot slot-number

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

slot slot-number: Specifies a card by its slot number.

Usage guidelines

To limit the incoming DHCPv6 packet rate, use the ip subscriber dhcpv6 rate-limit command. To display packet statistics for the DHCPv6 packet rate-limiting feature, use the display ipv6 dhcp rate-limit command.

Examples

# Display packet statistics for the DHCPv6 packet rate-limiting feature on a slot.

<Sysname> display ipv6 dhcp rate-limit slot 1

DHCPv6 rate-limit packet statistics:

Dropped since last poll:12

Total dropped packets:22

Total passed packets:1000

Table 3 Command output

Field	Description
DHCPv6 rate-limit packet statistics	Packet statistics for the DHCPv6 packet rate-limiting feature.
Dropped since last poll	Number of packets dropped by the DHCPv6 packet rate-limiting feature since the most recent data poll.
Total dropped packets	Total number of packets dropped by the DHCPv6 packet rate-limiting feature.
Total passed packets	Total number of packets permitted by the DHCPv6 packet rate-limiting feature.

‌

Related commands

ip subscriber dhcpv6 rate-limit (BRAS Services Command Reference)

reset ipv6 dhcp rate-limit

ipv6 dhcp advertise pd-route

Use ipv6 dhcp advertise pd-route to enable the DHCPv6 server or DHCPv6 relay agent to advertise IPv6 prefixes.

Use undo ipv6 dhcp advertise pd-route to disable the DHCPv6 server or DHCPv6 relay agent from advertising IPv6 prefixes.

Syntax

ipv6 dhcp advertise pd-route

undo ipv6 dhcp advertise pd-route

Default

The DHCPv6 server or DHCPv6 relay agent does not advertise IPv6 prefixes.

Views

System view

Predefined user roles

network-admin

Usage guidelines

A DHCPv6 client can obtain an IPv6 prefix through DHCPv6 and use this IPv6 prefix to assign IPv6 addresses to clients in a downstream network. If the IPv6 prefix is in a different subnet than the IPv6 address of the DHCPv6 client's upstream interface, clients in the downstream network cannot access the external network. You can use this command to enable this feature on the DHCPv6 server or DHCPv6 relay agent, whichever is on the same link as the DHCPv6 client.

This feature enables the DHCPv6 server or relay agent to generate a routing entry for the IPv6 prefix and advertises this entry to the dynamic routing protocol. When the DHCPv6 client learns this route through the dynamic routing protocol, clients in the downstream network can access the external network.

To use this command on the DHCPv6 relay agent, you must enable the DHCPv6 relay agent to record DHCPv6 relay entries first.

Examples

# Enable the DHCPv6 server to advertise IPv6 prefixes.

<Sysname> system-view

[Sysname] ipv6 dhcp advertise pd-route

ipv6 dhcp conflict-ip-address offline

Use ipv6 dhcp conflict-ip-address offline to release the IPv6 address obtained by an online DHCPv6 client for a new dynamic allocation.

Use undo ipv6 dhcp conflict-ip-address offline to restore the default.

Syntax

ipv6 dhcp conflict-ip-address offline

undo ipv6 dhcp conflict-ip-address offline

Default

The DHCPv6 device does not release the IPv6 address obtained by an online DHCPv6 client to allocate it to a new client.

Views

System view

Predefined user roles

network-admin

Usage guidelines

By default, a new DHCPv6 client or authorized user fails to come online in either of the following situations:

· Its IPv6 address allocated by the DHCPv6 server conflicts with the address in a relay entry.

· Its IPv6 address allocated by the authentication module (UCM or AAA) conflicts with the address obtained by an online DHCPv6 client.

This feature works as follows:

· On a DHCPv6 server:

a. The DHCPv6 server releases the IPv6 address obtained by an online DHCPv6 client when an IPv6 address conflict occurs during the dynamic allocation.

b. The server then informs the access module that this IPv6 address is conflicting and cannot be allocated.

· On a DHCPv6 relay agent:

¡ If the IPv6 address allocated by the authentication module conflicts with the address in a relay entry, the relay agent do the follows:

i The relay agent sends a DHCPv6-RELEASE message for the conflicting address to the DHCPv6 server.

ii The relay agent then informs the access module that this IPv6 address is conflicting and cannot be allocated.

¡ If the IPv6 address in the DHCPv6-REPLY message conflicts with the address in a relay entry, the relay agent do the follows:

i The relay agent sends a DHCPv6-RELEASE message for the conflicting address to the DHCPv6 server.

ii The relay agent then discards the DHCPv6 reply and the new DHCPv6 client fails to obtain an IPv6 address.

After the conflicting IPv6 address is released, the new DHCPv6 client or authorized user can obtain the address if it requests again.

This feature cannot take effect on a DHCPv6 relay agent without relay entry recording enabled.

Examples

# Enable the DHCPv6 server or authorized IPv6 pool to release the IPv6 address obtained by an online DHCPv6 client to allocate it to a new client.

<Sysname> system-view

[Sysname] ipv6 dhcp conflict-ip-address offline

Related commands

ipv6 dhcp relay client-information record

ipv6 dhcp dscp

Use ipv6 dhcp dscp to set the DSCP value for the DHCPv6 packets sent by the DHCPv6 server or the DHCPv6 relay agent.

Use undo ipv6 dhcp dscp to restore the default.

Syntax

ipv6 dhcp dscp dscp-value

undo ipv6 dhcp dscp

Default

The DSCP value is 56 in DHCPv6 packets sent by the DHCPv6 server or the DHCPv6 relay agent.

Views

System view

Predefined user roles

network-admin

Parameters

dscp-value: Specifies the DSCP value for DHCPv6 packets, in the range of 0 to 63.

Usage guidelines

The DSCP value of a packet specifies the priority level of the packet and affects the transmission priority of the packet. A bigger DSCP value represents a higher priority.

Examples

# Set the DSCP value to 30 for DHCPv6 packets sent by the DHCPv6 server or the DHCPv6 relay agent.

<Sysname> system-view

[Sysname] ipv6 dhcp dscp 30

ipv6 dhcp duid

Use ipv6 dhcp duid duid to set a DUID for the device.

Use undo ipv6 duid to restore the default.

Syntax

ipv6 dhcp duid duid

undo ipv6 duid

Default

The default DUID generated by the device applies.

Views

System view

Predefined user roles

network-admin

Parameters

duid: Specifies a DUID for the device. The argument is a string of 8 to 28 characters.

Usage guidelines

DHCP Unique Identifier (DUID) is designed for DHCPv6 device identification, including clients, servers, and relay agents.

If you execute this command multiple times, the most recent configuration takes effect.

By default, a DHCPv6 device generates a DUID when it starts.

To view the DUID of a DHCPv6 device, you can execute the display ipv6 dhcp duid command.

Examples

# Set the DUID to aabbccdd1122334455 for the device.

<Sysname> system view

[Sysname] ipv6 dhcp duid aabbccdd1122334455

Related commands

display ipv6 dhcp duid

ipv6 dhcp flood-protection aging-time

Use ipv6 dhcp flood-protection aging-time to set the aging time of DHCPv6 flood attack protection entries.

Use undo ipv6 dhcp flood-protection aging-time to restore the default.

Syntax

ipv6 dhcp flood-protection aging-time time

undo ipv6 dhcp flood-protection aging-time

Default

The aging time is 300 seconds for DHCPv6 flood attack protection entries.

Views

System view

Predefined user roles

network-admin

Parameters

time: Specifies the aging time of DHCPv6 flood attack protection entries, in seconds. The value range is 30 to 600.

Usage guidelines

When the aging time of a DHCPv6 flood attack protection entry for a MAC address is reached, the DHCPv6 device examines the drop rate of DHCPv6 packets sent from the MAC address.

· If the packet drop rate is lower than the DHCPv6 flood attack threshold, the device deletes the entry. If later a DHCPv6 packet from that MAC address arrives, the DHCPv6 device will create a new flood attack protection entry and count the number of incoming DHCPv6 packets for that client again.

· If the packet drop rate is equal to or higher than the DHCPv6 flood attack threshold, the device resets the aging time for the entry.

This command takes effect only you after you execute the ipv6 dhcp flood-protection enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the aging time to 90 seconds for DHCPv6 flood attack protection entries.

<Sysname> system-view

[Sysname] ipv6 dhcp flood-protection aging-time 90

Related commands

display ipv6 dhcp flood-protection

ipv6 dhcp flood-protection enable

ipv6 dhcp flood-protection threshold

ipv6 dhcp flood-protection enable

Use ipv6 dhcp flood-protection enable to enable DHCPv6 flood attack protection.

Use undo ipv6 dhcp flood-protection enable to disable DHCPv6 flood attack protection.

Syntax

ipv6 dhcp flood-protection enable

undo ipv6 dhcp flood-protection enable

Default

DHCPv6 flood attack protection is disabled.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

When the DHCPv6 device receives a DHCPv6 packet from a client (MAC address), it creates a DHCPv6 flood attack protection entry in check state. If the number of incoming DHCPv6 packets from the same MAC address reaches the upper limit in the detection duration, the device determines that the client is launching a DHCPv6 flood attack. The DHCPv6 flood attack protection entry changes to the restrain state, and the device discards the DHCPv6 packets from that client.

Examples

# Enable DHCPv6 flood attack protection on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp flood-protection enable

Related commands

display ipv6 dhcp flood-protection

ipv6 dhcp flood-protection threshold

ipv6 dhcp flood-protection aging-time

ipv6 dhcp flood-protection global enable

Use ipv6 dhcp flood-protection global enable to enable global DHCPv6 flood attack protection.

Use undo ipv6 dhcp flood-protection global enable to disable global DHCPv6 flood attack protection.

Syntax

ipv6 dhcp flood-protection global enable

undo ipv6 dhcp flood-protection global enable

Default

Global DHCPv6 flood attack protection is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

When the device receives a DHCPv6 packet from a client, it creates a DHCP flood attack protection entry in check state for that client. In the entry, the client is identified by its MAC address. If the number of incoming DHCPv6 packets from that client reaches the upper limit in the detection duration, the device determines that the client is launching a DHCPv6 flood attack. The DHCPv6 flood attack protection entry changes to the restrain state, and the device discards the DHCPv6 packets from that client.

You can configure DHCPv6 flood attack protection globally or on a per-interface basis.

DHCPv6 flood attack protection takes effect on an interface if it is enabled globally or on that interface. To enable DHCPv6 flood attack protection only on some of the interfaces, disable the feature globally and enable it on the desired interfaces.

Examples

# Enable global DHCPv6 flood attack protection.

<Sysname> system-view

[Sysname] ipv6 dhcp flood protection global enable

Related commands

display ipv6 dhcp flood-protection

ipv6 dhcp flood-protection threshold

ipv6 dhcp flood-protection aging-time

ipv6 dhcp flood-protection enable

ipv6 dhcp flood-protection threshold

Use ipv6 dhcp flood-protection threshold to set the DHCPv6 packet rate threshold for triggering DHCPv6 flood attack protection.

Use undo ipv6 dhcp flood-protection threshold to restore the default.

Syntax

ipv6 dhcp flood-protection threshold packet-number milliseconds

undo ipv6 dhcp flood-protection threshold

Default

The device allows a maximum of six DHCPv6 packets per 5000 milliseconds from each DHCPv6 client.

Views

System view

Predefined user roles

network-admin

Parameters

packet-number: Specifies the maximum number of DHCPv6 packets in the range of 2 to 200.

milliseconds: Specifies the DHCPv6 flood attack detection duration in milliseconds. The value range is 1000 to 30000.

Usage guidelines

The DHCPv6 flood attack protection enables the DHCPv6 device to detect DHCPv6 flood attacks according to the DHCPv6 packet rate threshold on a per-MAC basis. If the number of incoming DHCPv6 packets from the same MAC address reaches the upper limit in the detection duration, the client at that MAC address is launching a DHCPv6 flood attack.

This command takes effect only you after you execute the ipv6 dhcp flood-protection enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Configure the device to allow a maximum of two DHCPv6 packets per 9000 milliseconds from each DHCPv6 client.

<Sysname> system-view

[Sysname] ipv6 dhcp flood-protection threshold 2 9000

Related commands

display ipv6 dhcp flood-protection

ipv6 dhcp flood-protection aging-time

ipv6 dhcp flood-protection enable

ipv6 dhcp interface-rate-suppression aging-time

Use ipv6 dhcp interface-rate-suppression aging-time to set the aging time of interface-based DHCPv6 attack suppression entries.

Use undo ipv6 dhcp interface-rate-suppression aging-time to restore the default.

Syntax

ipv6 dhcp interface-rate-suppression aging-time time

undo ipv6 dhcp interface-rate-suppression aging-time

Default

The aging time is 300 seconds for interface-based DHCPv6 attack suppression entries.

Views

System view

Predefined user roles

network-admin

Parameters

time: Specifies the aging time of interface-based DHCPv6 attack suppression entries, in seconds. The value range is 30 to 600.

Usage guidelines

When the aging time of a DHCPv6 attack suppression entry on an interface is reached, the device examines the packet receiving rate on the interface.

· If the packet receiving rate is lower than the suppression threshold, the device deletes the entry. If later a DHCPv6 packet arrives on that interface, the DHCPv6 server will create a new attack suppression entry and count the number of incoming DHCPv6 packets on that interface again.

· If the packet receiving rate reaches or exceeds the suppression threshold, the device resets the aging time.

This command takes effect only after you execute the ipv6 dhcp interface-rate-suppression enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the aging time to 90 seconds for interface-based DHCPv6 attack suppression entries.

<Sysname> system-view

[Sysname] ipv6 dhcp interface-rate-suppression aging-time 90

Related commands

display ipv6 dhcp interface-rate-suppression

ipv6 dhcp interface-rate-suppression enable

ipv6 dhcp interface-rate-suppression threshold

ipv6 dhcp interface-rate-suppression enable

Use ipv6 dhcp interface-rate-suppression enable to enable DHCPv6 attack suppression on an interface.

Use undo ipv6 dhcp interface-rate-suppression enable to disable DHCPv6 attack suppression on an interface.

Syntax

ipv6 dhcp interface-rate-suppression enable

undo ipv6 dhcp interface-rate-suppression enable

Default

DHCPv6 attack suppression is disabled on an interface.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

When an interface enabled with this feature receives a DHCPv6 packet, the device creates a DHCPv6 attack suppression entry in check state for the interface. If the DHCP packet receiving rate on the interface reaches or exceeds the threshold, a DHCPv6 attack occurs on the interface. The suppression entry changes to the restrain state. To protect the CPU against DHCPv6 attack packets, the device limits the DHCPv6 packet receiving rate on the interface before the aging time of the suppression entry is reached.

Examples

# Enable DHCPv6 attack suppression on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp interface-rate-suppression enable

Related commands

display ipv6 dhcp interface-rate-suppression

ipv6 dhcp interface-rate-suppression aging-time

ipv6 dhcp interface-rate-suppression threshold

ipv6 dhcp interface-rate-suppression global enable

Use ipv6 dhcp interface-rate-suppression global enable to enable DHCPv6 attack suppression globally.

Use undo ipv6 dhcp interface-rate-suppression global enable to disable DHCPv6 attack suppression globally.

Syntax

ipv6 dhcp interface-rate-suppression global enable

undo ipv6 dhcp interface-rate-suppression global enable

Default

Global DHCPv6 attack suppression is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

To enable DHCPv6 attack suppression on all interfaces, use this command.

DHCPv6 attack suppression protects an interface from DHCPv6 attacks by limiting the rate of incoming DHCPv6 packets after the specified threshold is crossed.

After you enable DHCPv6 attack suppression globally on all interfaces, the device creates a DHCPv6 attack suppression entry in check state for each interface and counts their incoming DHCPv6 packets. If the incoming DHCPv6 packet rate on an interface reaches or exceeds the threshold, the device determines that the interface is under a DHCPv6 attack. Then, it changes the suppression entry for the interface to the restrain state. To protect the CPU against DHCPv6 attacks, the device limits the incoming DHCPv6 packet rate on the interface until the suppression entry ages out.

You can enable DHCPv6 attack suppression globally, or on a per-interface basis by using the ipv6 dhcp interface-rate-suppression enable command.

· DHCPv6 attack suppression takes effect on an interface as long as it is enabled globally or on the interface.

· To suppress DHCPv6 attacks only on some of the interfaces, you must disable DHCPv6 attack suppression globally, and then enable the feature on the target interfaces.

Examples

# Enable DHCPv6 attack suppression globally.

<Sysname> system-view

[Sysname] ipv6 dhcp interface-rate-suppression global enable

Related commands

ipv6 dhcp interface-rate-suppression enable

ipv6 dhcp interface-rate-suppression threshold

Use ipv6 dhcp interface-rate-suppression threshold to set the DHCP packet rate threshold for triggering interface-based DHCP attack suppression.

Use undo ipv6 dhcp interface-rate-suppression threshold to restore the default.

Syntax

ipv6 dhcp interface-rate-suppression threshold packet-number milliseconds

undo ipv6 dhcp interface-rate-suppression threshold

Default

The device can receive a maximum of 3000 DHCPv6 packets per 5000 milliseconds on an interface.

Views

System view

Predefined user roles

network-admin

Parameters

packet-number: Specifies the maximum number of DHCP packets received on an interface, in the range of 2 to 6000.

milliseconds: Specifies the interface-based DHCP attack detection duration in milliseconds. The value range is 1000 to 10000.

Usage guidelines

A DHCP attack occurs on an interface if the DHCP packet receiving rate on the interface reaches or exceeds the threshold.

This command takes effect only after you execute the ipv6 dhcp interface-rate-suppression enable command.

If you execute the command multiple times, the most recent configuration takes effect.

Examples

# Set the DHCP packet rate threshold to 2000 DHCP packets per 9000 milliseconds for triggering interface-based DHCP attack suppression.

<Sysname> system-view

[Sysname] ipv6 dhcp interface-rate-suppression threshold 2000 9000

Related commands

display ipv6 dhcp interface-rate-suppression

ipv6 dhcp interface-rate-suppression aging-time

ipv6 dhcp interface-rate-suppression enable

ipv6 dhcp log enable

Use ipv6 dhcp log enable to enable DHCPv6 server logging.

Use undo ipv6 dhcp log enable to disable DHCPv6 server logging.

Syntax

ipv6 dhcp log enable

undo ipv6 dhcp log enable

Default

DHCPv6 server logging is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

This command enables the DHCPv6 server to generate DHCPv6 logs and send them to the information center. For information about the log destination and output rule configuration in the information center, see Network Management and Monitoring Configuration Guide.

As a best practice, disable this feature if the log generation affects the device performance or reduces the address and prefix allocation efficiency. For example, this situation might occur when a large number of clients frequently come online or go offline.

Examples

# Enable DHCPv6 server logging.

<Sysname> system-view

[Sysname] ipv6 dhcp log enable

ipv6 dhcp select

Use ipv6 dhcp select to enable the DHCPv6 server or DHCPv6 relay agent on an interface.

Use undo ipv6 dhcp select to restore the default.

Syntax

ipv6 dhcp select { relay | server }

undo ipv6 dhcp select

Default

An interface does not work in the DHCPv6 server mode or in the DHCPv6 relay agent mode. It discards DHCPv6 packets from DHCPv6 clients.

Views

Interface view

Predefined user roles

network-admin

Parameters

relay: Enables the DHCPv6 relay agent on the interface.

server: Enables the DHCPv6 server on the interface.

Usage guidelines

Before changing the DHCPv6 server mode to the DHCPv6 relay agent mode on an interface, use the following commands to remove IPv6 address/prefix bindings:

· reset ipv6 dhcp server ip-in-use

· reset ipv6 dhcp server pd-in-use

Do not configure the DHCPv6 client on the interface that has been configured as the DHCPv6 relay agent or DHCPv6 server.

Examples

# Enable the DHCPv6 server on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp select server

# Enable the DHCPv6 relay agent on Ten-GigabitEthernet 3/0/2.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/2

[Sysname-Ten-GigabitEthernet3/0/2] ipv6 dhcp select relay

Related commands

display ipv6 dhcp relay server-address

display ipv6 dhcp server

ipv6 dhcp session-mismatch action

Use ipv6 dhcp session-mismatch action to specify a DHCPv6 request processing method for roaming DHCPv6 clients.

Use undo ipv6 dhcp session-mismatch action to restore the default.

Syntax

ipv6 dhcp session-mismatch action { fast-renew | roam }

undo ipv6 dhcp session-mismatch action

Default

The DHCPv6 device discards DHCPv6 address requests sent from roaming DHCPv6 clients.

Views

Interface view

Predefined user roles

network-admin

Parameters

fast-renew: Releases existing IPv6 address or prefix leases for roaming clients and assigns new IPv6 addresses or prefixes to them.

roam: Assigns IPv6 addresses or prefixes to roaming clients based on their existing leases and renews the leases. This keyword is applicable only to roaming IPoE users.

Usage guidelines

This command is applicable only to IPoE networks.

When a DHCPv6 client roams in a network, the client sends an offline request to the DHCPv6 device (DHCPv6 server or relay agent) before requesting a new address or prefix. If the DHCPv6 device does not receive the offline request, it will discard the DHCPv6 client's new address or prefix request because it determines that the request is an attack packet.

This feature allows the DHCPv6 device to process address or prefix requests as follows upon receiving them from roaming DHCPv6 clients:

· If the fast-renew keyword is specified:

¡ The DHCPv6 server releases existing address or prefix leases of the roaming clients and assigns them new IP addresses or prefixes.

¡ The DHCPv6 relay agent informs the DHCPv6 server to release existing address or prefix leases of roaming clients and forwards the requests to the DHCPv6 server.

· If the roam keyword is specified:

¡ The DHCPv6 server assigns addresses to the roaming clients based on their existing address or prefix leases and renews the leases.

¡ The DHCPv6 relay agent forwards the requests of the roaming clients to the DHCPv6 server.

The roam keyword allows the clients to use the original IPv6 addresses or prefixes to access the network without another access authentication.

This feature might make online users go offline. Enable this feature for roaming DHCPv6 clients only when no DHCPv6 attacks exist in the network.

Examples

# On Ten-GigabitEthernet 3/0/1, configure the DHCPv6 server to use the fast-renew method for roaming clients.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp session-mismatch action fast-renew

Related commands

ip subscriber roaming enable (BRAS Services Command Reference)

reset ipv6 dhcp flood-protection

Use reset ipv6 dhcp flood-protection to delete DHCPv6 flood attack protection entries.

Syntax

reset ipv6 dhcp flood-protection slot slot-number [ mac-address mac-address [ interface interface-type interface-number ] ] [ packet-statistics ]

Views

User view

Predefined user roles

network-admin

Parameters

mac-address mac-address: Deletes DHCPv6 flood attack protection entries with the specified MAC address in the format of H-H-H. If you do not specify this option, the command deletes all DHCPv6 flood attack protection entries.

interface interface-type interface-number: Deletes DHCPv6 flood attack protection entries for the specified interface.

slot slot-number: Specifies a card by its slot number.

packet-statistics: Clears the packet statistics in the specified entries. If you do not specify this keyword, this command deletes the specified DHCPv6 flood attack protection entries.

Usage guidelines

If you do not specify any parameters, this command deletes all DHCPv6 flood attack protection entries on the device.

Examples

# Delete all DHCPv6 flood attack protection entries on slot 1.

<Sysname> reset ipv6 dhcp flood-protection slot 1

Related commands

display ipv6 dhcp flood-protection

reset ipv6 dhcp interface-rate-suppression

Use reset ipv6 dhcp interface-rate-suppression to delete interface-based DHCPv6 attack suppression entries.

Syntax

reset ipv6 dhcp interface-rate-suppression slot slot-number [ interface interface-type interface-number ] [ packet-statistics ]

Views

User view

Predefined user roles

network-admin

Parameters

interface interface-type interface-number: Deletes the DHCPv6 attack suppression entry for the specified interface.

slot slot-number: Specifies a card by its slot number.

packet-statistics: Clears packet statistics in the specified entries. If you do not specify this keyword, this command deletes the specified interface-based DHCPv6 attack suppression entries.

Usage guidelines

If you do not specify any parameters, this command deletes all interface-based DHCPv6 attack suppression entries on the device.

Examples

# Delete all interface-based DHCPv6 attack suppression entries on slot 1.

<Sysname> reset ipv6 dhcp interface-rate-suppression slot 1

Related commands

display ipv6 dhcp interface-rate-suppression

reset ipv6 dhcp rate-limit

Use reset ipv6 dhcp rate-limit to clear packet statistics for the DHCPv6 packet rate-limiting feature.

Syntax

reset ipv6 dhcp rate-limit slot slot-number

Views

User view

Predefined user roles

network-admin

Parameters

slot slot-number: Specifies a card by its slot number.

Usage guidelines

This command clears the DHCPv6 packet statistics collected for the DHCPv6 packet rate-limiting feature feature. You can enable that feature by using the ip subscriber dhcpv6 rate-limit command.

Examples

# Clear packet statistics for the DHCPv6 packet rate-limiting feature on slot 1.

<Sysname> reset ipv6 dhcp rate-limit slot 1

Related commands

display ipv6 dhcp rate-limit

ip subscriber dhcpv6 rate-limit (BRAS Services Command Reference)

DHCPv6 server commands

address-alloc-mode

Use address-alloc-mode to specify an IPv6 address mode for an IPv6 address pool.

Use undo address-alloc-mode to restore the default.

Syntax

address-alloc-mode { eui-64 | interface-id }

undo address-alloc-mode

Default

The DHCPv6 server selects the first usable IPv6 address in the IPv6 address pool according to the IPv6 address allocation sequence.

Views

Common IPv6 address pool view

Predefined user roles

network-admin

Parameters

eui-64: Specifies the EUI-64-based allocation mode.

interface-id: Specifies the interface ID-based allocation mode.

Usage guidelines

Some DHCPv6 networks require that interface identifiers in IPv6 addresses for users be generated by using the EUI-64 method for security and audit purposes. To meet such requirement, you must set the IPv6 address allocation mode to eui-64. After receiving a request from a client, the DHCPv6 server performs the following operations:

1. Selects the first usable IPv6 address according to the address allocation sequence.

2. Uses the MAC address of the client to generate an interface identifier by using the EUI-64 method.

3. Replaces the interface identifier in the selected address with the new interface identifier.

4. Assigns the IPv6 address to the DHCPv6 client.

A Windows 7 client determines the IPv6 global unicast address assigned by the DHCPv6 server is unusable if this address has a different interface ID than the client's link-local address. The client cannot use the assigned address as the source IP address of outgoing packets. To resolve this issue, set the IPv6 address allocation mode to interface-id. After receiving a request from a client, the DHCPv6 server generates an IPv6 address that has the same interface identifier as the source address of the request. The IPv6 address is then assigned to the client.

The IPv6 address allocation mode of an IPv6 address pool cannot be modified if IPv6 addresses in this address pool have been assigned to clients.

Examples

# Specify the EUI-64-based allocation mode for IPv6 address pool pool1.

<Sysname> system-view

[Sysname] ipv6 pool pool1

[Sysname-ipv6-pool-pool1] address-alloc-mode eui-64

address range

Use address range to specify a non-temporary IPv6 address range in an IPv6 address pool for dynamic allocation.

Use undo address range to restore the default.

Syntax

address range start-ipv6-address end-ipv6-address [ preferred-lifetime preferred-lifetime valid-lifetime valid-lifetime ]

undo address range

Default

No non-temporary IPv6 address range exists.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

start-ipv6-address: Specifies the start IPv6 address.

end-ipv6-address: Specifies the end IPv6 address.

preferred-lifetime preferred-lifetime: Specifies the preferred lifetime for the non-temporary IPv6 addresses. The value range is 60 to 4294967295 seconds, and the default is 604800 seconds (7 days).

valid-lifetime valid-lifetime: Specifies the valid lifetime for the non-temporary IPv6 addresses. The value range is 60 to 4294967295 seconds, and the default is 2592000 seconds (30 days). The valid lifetime cannot be shorter than the preferred lifetime.

Usage guidelines

If you do not specify a non-temporary IPv6 address range, all unicast addresses on the subnet specified by the network command in address pool view are assignable. If you specify a non-temporary IPv6 address range, only the IPv6 addresses in the specified IPv6 address range are assignable.

You can specify only one non-temporary IPv6 address range in an address pool. If you execute this command multiple times, the most recent configuration takes effect.

The non-temporary IPv6 address range specified by the address range command must be on the subnet specified by the network command.

Examples

# Configure a non-temporary IPv6 address range from 3ffe:501:ffff:100::10 through 3ffe:501:ffff:100::31 in address pool 1.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] network 3ffe:501:ffff:100::/64

[Sysname-ipv6-pool-1] address range 3ffe:501:ffff:100::10 3ffe:501:ffff:100::31

Related commands

display ipv6 pool

network

temporary address range

aftr-name

Use aftr-name to specify an address family translation router (AFTR) domain name in an IPv6 address pool.

Use undo aftr-name to restore the default.

Syntax

aftr-name aftr-name

undo aftr-name

Default

No AFTR domain name is specified.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

aftr-name: Specifies an AFTR domain name, a case-sensitive string of 1 to 63 characters.

Usage guidelines

You can specify only one AFTR domain name in an IPv6 address pool. If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify AFTR domain name aaa.com in IPv6 address pool 1.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] aftr-name aaa.com

allocate-new-ip enable

Use allocate-new-ip enable to enable random IPv6 address allocation.

Use undo allocate-new-ip enable to disable random IPv6 address allocation.

Syntax

allocate-new-ip enable

undo allocate-new-ip enable

Default

Random IPv6 address allocation is disabled.

Views

IPv6 address pool view

Predefined user roles

network-admin

Usage guidelines

CAUTION:

Enable this feature on the DHCPv6 server with caution when it works in conjunction with a DHCPv6 relay agent that is located on an access device. In this situation, this feature might prevent access users from coming online again after an abnormal offline event.

‌

By default, the DHCPv6 server tries to allocate the same IP address as the previous allocation to the same user.

With this feature enabled, the DHCPv6 server tries to allocate a new IP address to a user every time the user acquires an IP address. This feature is applicable to the scenarios where each user is identified by IP address. In such a network scenario, it is required that a user must obtain different IP addresses for each IP address acquisition.

Examples

# Enable random IP address allocation.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] allocate-new-ip enable

This command will enable random IPv6 address allocation. Continue? [Y/N]:

class pool

Use class pool to specify an IPv6 address pool for a DHCPv6 user class.

Use undo class pool to restore the default.

Syntax

class class-name pool pool-name

undo class class-name pool

Default

No IPv6 address pool is specified for a DHCPv6 user class.

Views

DHCPv6 policy view

Predefined user roles

network-admin

Parameters

class-name: Specifies a DHCPv6 user class by its name, a case-insensitive string of 1 to 63 characters.

pool-name: Specifies an IPv6 address pool by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

You can specify only one IPv6 address pool for a DHCPv6 user class in a DHCPv6 policy. If you execute this command multiple times for a user class, the most recent configuration takes effect.

Examples

# Specify IPv6 address pool pool1 for DHCPv6 user class test in DHCPv6 policy 1.

<Sysname> system-view

[Sysname] ipv6 dhcp policy 1

[Sysname-dhcp6-policy-1] class test pool pool1

Related commands

default pool

ipv6 dhcp policy

ipv6 pool

default pool

Use default pool to specify the default IPv6 address pool.

Use undo default pool to restore the default.

Syntax

default pool pool-name

undo default pool

Default

No default IPv6 address pool is specified.

Views

DHCPv6 policy view

Predefined user roles

network-admin

Parameters

pool-name: Specifies an IPv6 address pool by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

In a DHCPv6 policy, the DHCPv6 server uses the default address pool to assign IPv6 address, IPv6 prefix, or other parameters to clients that do not match any user classes. If no default address pool is specified or the default address pool does not have assignable IPv6 addresses or prefixes, the assignment fails.

You can specify only one default address pool in a DHCPv6 policy. If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify IPv6 address pool pool1 as the default IPv6 address pool in DHCPv6 policy 1.

<Sysname> system-view

[Sysname] ipv6 dhcp policy 1

[Sysname-dhcp6-policy-1] default pool pool1

Related commands

class pool

ipv6 dhcp policy

display dhcpv6-access count

Use display dhcpv6-access count to display the number of DHCPv6 access users.

Syntax

display dhcpv6-access count

Views

Any view

Predefined user roles

network-admin

network-operator

Usage guidelines

To display DHCPv6 access user information, use the display dhcpv6-access user-table command.

Examples

# Display the number of DHCPv6 access users on the device.

<Sysname> display dhcpv6-access count

Total access-user count: 20

Table 4 Command output

Field	Description
Total access-user count	Number of DHCPv6 access users.

‌

Related commands

display dhcpv6-access user-table

display dhcpv6-access packet statistics

Use display dhcpv6-access packet statistics to display packet statistics for the DHCPv6 access module.

Syntax

display dhcpv6-access packet statistics

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display packet statistics for the DHCPv6 access module.

<Sysname> display dhcpv6-access packet statistics

Received packets

Received from clients : 40

Solicit : 8

Request : 11

Renew : 0

Rebind : 14

Confirm : 0

Release : 7

Decline : 0

Info-Request : 0

Received from servers : 0

Advertise : 0

Reply : 0

Received invalid packets : 22

Sent packets

Sent to clients : 18

Advertise : 8

Reply : 10

Sent to servers : 0

Solicit : 0

Request : 0

Renew : 0

Rebind : 0

Confirm : 0

Release : 0

Decline : 0

Info-Request : 0

Table 5 Command output

Field	Description
Received packets	Statistics about received packets.
Received from clients	Number of packets received from DHCPv6 clients.
Solict	Number of received Solict packets.
Request	Number of received Request packets.
Renew	Number of received Renew packets.
Rebind	Number of received Rebind packets.
Confirm	Number of received Confirm packets.
Release	Number of received Release packets.
Decline	Number of received Decline packets.
Info-Request	Number of received information-Request packets.
Received from servers	Number of packets received from DHCPv6 servers.
Advertise	Number of received Advertise packets.
Reply	Number of received Reply packets.
Sent packets	Statistics about sent packets.
Sent to clients	Number of packets sent to DHCPv6 clients.
Advertise packets	Number of sent Advertise packets.
Reply	Number of sent Reply packets.
Sent to servers	Number of packets sent to DHCPv6 servers.
Solicit	Number of sent Solicit packets.
Request	Number of sent Request packets.
Renew	Number of sent Renew packets.
Rebind	Number of sent Rebind packets.
Confirm	Number of sent Confirm packets.
Release	Number of sent Release packets.
Decline	Number of sent Decline packets.
Info-Request	Number of sent Information-Request packets.

‌

Related commands

reset dhcpv6-access packet statistics

display dhcpv6-access user-table

Use display dhcpv6-access user-table to display information about DHCPv6 access users.

Syntax

display dhcpv6-access user-table [ index index-value | mac-address mac-address | user-id user-id ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

index index-value: Specifies a DHCPv6 user index in the range of 1 to 4294967294.

mac-address mac-address: Specifies the MAC address of a user, in the format of H-H-H.

user-id user-id: Specifies a user ID, in the range of 1 to fffffffe. The user ID is case insensitive.

Examples

# Display information about all DHCPv6 access users on the device.

<Sysname> display dhcpv6-access user-table

DHCP-ACCESS-USER-INFO-BRIEF(Total:3)

User ID : 0x40000001

User index : 1

Interface : Ten-GigabitEthernet3/0/1

SVLAN : N/A

CVLAN : N/A

User MAC address : 0002-0101-010C

User state : ONLINE

VPN instance : N/A

User IPv6 address : 1100::1

User IPv6 prefix : 2200::/64

IPv6 pool for address alloc : test_dhcp

IPv6 pool for prefix alloc : test_dhcp

Primary DNS server : 4534::2

Second DNS server : 4534::3

User ID : 0x40000002

User index : 2

Interface : Ten-GigabitEthernet3/0/2

SVLAN : N/A

CVLAN : N/A

User MAC address : 0002-0101-010D

User state : ONLINE

VPN instance : N/A

User IPv6 address : 1200::1

User IPv6 prefix : 2300::/64

IPv6 pool for address alloc : test_dhcp2

IPv6 pool for prefix alloc : test_dhcp3

Primary DNS server : 4534::2

Second DNS server : 4534::3

User ID : 0x13

User index : 23

Interface : Ten-GigabitEthernet3/0/3

SVLAN : N/A

CVLAN : N/A

User MAC address : 0010-9400-0005

User state : WAIT_CLIENT_REQ

VPN instance : N/A

User IPv6 address : 220:220::3

User IPv6 prefix : N/A

IPv6 pool for address alloc : ipoe

IPv6 pool for prefix alloc : N/A

Primary DNS server : N/A

Second DNS server : N/A

User entry aging time : Mar 4 15:38:13 2021

Table 6 Command output

Field	Description
DHCP-ACCESS-USER-INFO-BRIEF(Total:x)	Brief information about a DHCPv6 user, and the number of DHCPv6 users.
User ID	DHCPv6 user ID, in hexadecimal notation.
User index	DHCPv6 user index, in decimal notation.
Interface	Interface from which the DHCPv6 user comes online.
SVLAN	SVLAN to which the DHCPv6 user belongs. If the user does not belong to any SVLAN, this field displays N/A.
CVLAN	CVLAN to which the DHCPv6 user belongs. If the user does not belong to any CVLAN, this field displays N/A.
User MAC address	MAC address of the DHCPv6 user.
User state	Status of the DHCPv6 user: · INIT—Initial state. · WAIT_UCM_REQ_ACK—Expecting an acknowledgment from UCM. · WAIT_SERVER_ADVERTISE—Expecting an Advertise from the DHCPv6 server. · WAIT_CLIENT_REQ—Expecting a Request from the DHCP client. · WAIT_SERVER_REPLY—Expecting a Reply from the DHCPv6 server. · WAIT_UCM_UP_ACK—Expecting a lease acknowledgment from UCM. · ONLINE—Online status. · WAIT_UCM_DOWN_ACK—Expecting an acknowledgment for lease release from UCM. · RENEW_WAIT_SERVER_REPLY—Expecting a lease renew reply from the DHCPv6 server.
VPN instance	VPN instance to which the DHCPv6 user belongs. If the user is on the public network, this field displays N/A.
User IPv6 address	IPv6 address that the DHCPv6 user has obtained.
User IPv6 prefix	IPv6 prefix that the DHCPv6 user has obtained.
IPv6 pool for address alloc	Name of the IPv6 address pool that assigns the IPv6 address to the user.
IPv6 pool for prefix alloc	Name of the IPv6 prefix pool that assigns the IPv6 prefix to the user.
Primary DNS server	IPv6 address of the primary DNS server.
Second DNS server	IPv6 address of the secondary DNS server.
User entry aging time	User entry aging time in the format of MM DD hh:mm:ss YYYY. · MM—Represents the month. · DD—Represents the day. · hh—Represents the hours. · mm—Represents the minutes. · ss—Represents the seconds. · YYYY—Represents the year. When the aging time of a user entry is reached, the DHCPv6 server deletes that user entry. When the DHCPv6 user is online, this field does not appear.

‌

display ipv6 dhcp pool-group-usage

Use display ipv6 dhcp pool-group-usage to display IPv6 resource usage information for an IPv6 pool group.

Syntax

display ipv6 dhcp pool-group-usage [ pool-group pool-group-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

pool-group pool-group-name: Specifies an IPv6 pool group by its name. The pool-group-name argument is a case-insensitive string of 1 to 63 characters. If you do not specify this option, this command displays IPv6 resource usage information for all IPv6 pool groups.

Examples

# Display IPv6 resource usage information for all IPv6 pool groups.

<Sysname> display ipv6 dhcp pool-group-usage

Total number of IPv6 pool groups: 2

Pool group name: 1

Resource Type Total Used Utilization(%)

IPv6 address 91 1 39%

IPv6 prefix 245 1 1%

Pool group name: 1

Resource Type Total Used Utilization(%)

IPv6 address 91 1 39%

IPv6 prefix 245 1 1%

# Display IPv6 resource usage information for IPv6 pool group poolgroup1.

<Sysname> display ipv6 dhcp pool-group-usage pool-roup poolgroup1

Pool group name: poolgroup1

Resource Type Total Used Utilization(%)

IPv6 address 91 1 39%

IPv6 prefix 245 1 1%

Table 7 Command output

Field	Description
Total number of IPv6 pool groups	Total number of IPv6 pool groups.
Pool group name	Name of the IPv6 pool group.
Resource Type	IPv6 resource type: · IPv6 address. · IPv6 prefix.
Total	Number of IPv6 addresses or prefixes in the IPv6 pool group.
Used	Number of assigned IPv6 addresses or prefixes in the IPv6 pool group.
Utilizaiton(%)	Address or prefix usage of the IPv6 pool group, in percentage.

‌

display ipv6 dhcp pool-usage

Use display ipv6 dhcp pool-usage to display IPv6 resource usage information for an IPv6 pool.

Syntax

display ipv6 dhcp pool-usage [ peak ] [ pool pool-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

peak: Displays peak resource usage information an IPv6 pool. The displayed value is the highest IPv6 resource usage of the pool before you execute this command. If you do not specify this keyword, this command displays the real-time IPv6 resource usage of the pool.

pool pool-name: Specifies an IPv6 pool by its name. The pool-name argument is a case-insensitive string of 1 to 63 characters. If you do not specify this option, this command displays IPv6 resource usage information for all IPv6 pools.

Usage guidelines

If the peak resource usage of an IPv6 pool appeared multiple times, this command displays the peak IPv6 resource usage that appeared earliest.

Examples

# Display resource usage information for all IPv6 pools.

<Sysname> display ipv6 dhcp pool-usage

Total number of IPv6 pools: 2

Pool name: 1

Resource Type Total Used Utilization(%)

IPv6 address 787 254 32.27%

IPv6 prefix 101 1 1.00%

Pool name: 2

Resource Type Total Used Utilization(%)

IPv6 address 223 23 9.87%

IPv6 prefix 556 2 3.60%

# Display resource usage information for pool pool1.

<Sysname> display ipv6 dhcp pool-usage pool pool1

Pool name: pool1

Resource Type Total Used Utilization(%)

IPv6 address 91 1 1.10%

IPv6 prefix 245 1 0.41%

# Display peak resource usage information for all IPv6 pools.

<Sysname> display ipv6 dhcp pool-usage peak

Total number of IPv6 pools: 2

Pool name: 1

Resource Type Peak Utilization(%) Time

IPv6 address 32.27% Mar 11 07:22:43 2021

IPv6 prefix 1.00% Mar 12 08:10:23 2021

Pool name: 2

Resource Type Peak Utilization(%) Time

IPv6 address 9.87% Mar 11 11:06:39 2021

IPv6 prefix 3.60% Mar 12 09:14:22 2021

# Display peak resource usage information pool pool1.

<Sysname> display ipv6 dhcp pool-usage peak pool pool1

Pool name: pool1

Resource Type Peak Utilization(%) Time

IPv6 address 1.10% Mar 11 10:33:32 2021

IPv6 prefix 0.41% Mar 12 07:22:20 2021

Table 8 Command output

Field	Description
Total number of IPv6 pools	Total number of IPv6 pools.
Pool name	Name of the IP pool.
Resource Type	IPv6 resource type: · IPv6 address. · IPv6 prefix.
Total	Number of IPv6 addresses or prefixes in the IP pool.
Used	Number of assigned IPv6 addresses or prefixes in the IP pool.
Utilizaiton(%)	IPv6 address or prefix usage of the IPv6 pool, in percentage.
Peak utilization(%)	Peak resource usage of the IPv6 pool, in percentage.
Time	Date and time when the address or prefix usage of the IPv6 pool reached the peak, in the format of MM DD hh:mm:ss YYYY. · MM—Represents the month. · DD—Represents the day. · hh—Represents the hours. · mm—Represents the minutes. · ss—Represents the seconds. · YYYY—Represents the year.

‌

Related commands

reset ipv6 dhcp pool-usage peak

display ipv6 dhcp option-group

Use display ipv6 dhcp option-group to display information about a DHCPv6 option group.

Syntax

display ipv6 dhcp option-group [ option-group-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

option-group-number: Specifies a static or dynamic DHCPv6 option group by its ID. The value range for the option group ID is 1 to 100. If you do not specify an option group, this command displays information about all DHCPv6 option groups.

Usage guidelines

A static DHCPv6 option group is created by using the ipv6 dhcp option-group command.

A dynamic DHCPv6 option group is created automatically by a DHCPv6 client after it obtains the DHCPv6 configuration parameters. Dynamic option groups cannot be manually modified or deleted.

Examples

# Display information about all DHCPv6 option groups.

<Sysname> display ipv6 dhcp option-group

DHCPv6 option group: 1

DNS server addresses:

Type: Static

Interface: N/A

1::1

DNS server addresses:

Type: Dynamic (DHCPv6 address allocation)

Interface: Ten-GigabitEthernet3/0/1

1::1

Domain name:

Type: Static

Interface: N/A

aaa.com

Domain name:

Type: Dynamic (DHCPv6 address allocation)

Interface: Ten-GigabitEthernet3/0/1

aaa.com

Options:

Code: 23

Type: Dynamic (DHCPv6 prefix allocation)

Interface: Ten-GigabitEthernet3/0/1

Length: 2 bytes

Hex: ABCD

DHCPv6 option group: 20

DNS server addresses:

Type: Static

Interface: N/A

1::1

DNS server addresses:

Type: Dynamic (DHCPv6 address allocation)

Interface: Ten-GigabitEthernet3/0/1

1::1

Domain name:

Type: Static

Interface: N/A

aaa.com

Domain name:

Type: Dynamic (DHCPv6 address allocation)

Interface: Ten-GigabitEthernet3/0/1

aaa.com

Options:

Code: 23

Type: Dynamic (DHCPv6 prefix allocation)

Interface: Ten-GigabitEthernet3/0/1

Length: 2 bytes

Hex: ABCD

Table 9 Command output

Field	Description
DHCPv6 option group	ID of the DHCPv6 option group.
Type	Types of the DHCPv6 option: · Static—Parameter in a static DHCPv6 option group. · Dynamic (DHCPv6 address allocation)—Parameter in a dynamic DHCPv6 option group created during IPv6 address acquisition. · Dynamic (DHCPv6 prefix allocation)—Parameters in a dynamic DHCPv6 option group created during IPv6 prefix acquisition. · Dynamic (DHCPv6 address and prefix allocation)—Parameters in a dynamic DHCPv6 option group created during IPv6 address and prefix acquisition.
Interface	Interface name.
DNS server addresses	IPv6 address of the DNS server.
Domain name	Domain name suffix.
SIP server addresses	IPv6 address of the SIP server.
SIP server domain names	Domain name of the SIP server.
Options	Self-defined options.
Code	Code of the self-defined option.
Length	Self-defined option length in bytes.
Hex	Self-defined option content represented by a hexadecimal number.

‌

Related commands

ipv6 dhcp option-group

display ipv6 dhcp prefix-pool

Use display ipv6 dhcp prefix-pool to display information about a prefix pool.

Syntax

display ipv6 dhcp prefix-pool [ prefix-pool-number ] [ vpn-instance vpn-instance-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

prefix-pool-number: Displays detailed information about a prefix pool specified by its number in the range of 1 to 128. If you do not specify a prefix pool, this command displays brief information about all prefix pools.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays information about prefix pools for the public network.

Examples

# Display brief information about all prefix pools.

<Sysname> display ipv6 dhcp prefix-pool

Prefix-pool Prefix Available In-use Static

1 5::/64 64 0 0

# Display brief information about all prefix pools.

<Sysname> display ipv6 dhcp prefix-pool

Prefix-pool Prefix Available In-use Static

2 Not-available 0 0 0

# Display brief information about all prefix pools.

<Sysname> display ipv6 dhcp prefix-pool

Prefix-pool Prefix Available In-use Static

11 21::/112(Zombie) 0 64 0

# Display detailed information about prefix pool 1.

<Sysname> display ipv6 dhcp prefix-pool 1

Prefix: 5::/64

Assigned length: 70

Total prefix number: 64

Available: 64

In-use: 0

Static: 0

# Display detailed information about prefix pool 1.

<Sysname> display ipv6 dhcp prefix-pool 1

Prefix: Not-available

Assigned length: 70

Total prefix number: 0

Available: 0

In-use: 0

Static: 0

# Display detailed information about prefix pool 1.

<Sysname> display ipv6 dhcp prefix-pool 1

Prefix: 5::/64(Zombie)

Assigned length: 70

Total prefix number: 10

Available: 0

In-use: 10

Static: 0

Table 10 Command output

Field	Description
Prefix-pool	Prefix pool number.
Prefix	Prefix specified in the prefix pool. If the prefix is ineffective, this field displays Not-available. If the prefix becomes ineffective after a configuration recovery (for example, a switchover from the backup to the master), the prefix is marked (Zombie).
Available	Number of available prefixes.
In-use	Number of assigned prefixes.
Static	Number of statically bound prefixes.
Assigned length	Length of assigned prefixes.
Total prefix number	Number of prefixes.

‌

display ipv6 dhcp server

Use display ipv6 dhcp server to display DHCPv6 server configuration information.

Syntax

display ipv6 dhcp server [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Displays DHCPv6 server configuration information for the specified interface. If you do not specify an interface, this command displays DHCPv6 server configuration information for all interfaces.

Examples

# Display DHCPv6 server configuration information for all interfaces.

<Sysname> display ipv6 dhcp server

Interface Pool

Ten-GigabitEthernet3/0/1 1

Ten-GigabitEthernet3/0/1 global

# Display DHCPv6 server configuration information for the interface Ten-GigabitEthernet 3/0/1.

<Sysname> display ipv6 dhcp server interface ten-gigabitethernet 3/0/1

Using pool: 1

Preference value: 0

Allow-hint: Enabled

Rapid-commit: Disabled

Table 11 Command output

Field	Description
Interface	Interface enabled with DHCPv6 server.
Pool	Address pool applied to the interface. If no address pool is applied to the interface, global is displayed. The DHCPv6 server selects a global address pool to assign a prefix, an address, and other configuration parameters to a client.
Using pool	Address pool applied to the interface. If no address pool is applied to the interface, global is displayed. The DHCPv6 server selects a global address pool to assign a prefix, an address, and other configuration parameters to a client.
Preference value	Server preference in the DHCPv6 Advertise message. The value range is 0 to 255. The bigger the value is, the higher preference the server has.
Allow-hint	Indicates whether desired address/prefix assignment is enabled.
Rapid-commit	Indicates whether rapid address/prefix assignment is enabled.

‌

display ipv6 dhcp server conflict

Use display ipv6 dhcp server conflict to display information about IPv6 address conflicts.

Syntax

display ipv6 dhcp server conflict [ address ipv6-address | interface interface-type interface-number ] [ vpn-instance vpn-instance-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

address ipv6-address: Specifies an IPv6 address. If you do not specify an IPv6 address, this command displays information about all IPv6 address conflicts.

interface interface-type interface-number: Specifies an interface to display interface-specific IPv6 address conflicts.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays IPv6 address conflict information for the public network.

Usage guidelines

The DHCPv6 server creates IP address conflict information in the following situations:

· The DHCPv6 client sends a DECLINE packet to the DHCPv6 server to inform the server of an IPv6 address conflict.

· The DHCPv6 server discovers that the only assignable address in the address pool is its own IPv6 address.

If you do not specify a parameter, this command displays information about all IPv6 address conflicts.

Examples

# Display information about all address conflicts.

<Sysname> display ipv6 dhcp server conflict

IPv6 address Detect time

2001::1 Apr 25 16:57:20 2019

1::1:2 Apr 25 17:00:10 2019

Table 12 Command output

Field	Description
IPv6 address	Conflicting IPv6 address. If the IPv6 address is reusable, the command output displays (*).
Detect time	Time when the conflict was discovered.

‌

Related commands

reset ipv6 dhcp server conflict

display ipv6 dhcp server database

Use display ipv6 dhcp server database to display information about DHCPv6 binding auto backup.

Syntax

display ipv6 dhcp server database

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display information about DHCPv6 binding auto backup.

<Sysname> display ipv6 dhcp server database

File name : database.dhcp

Username :

Password :

Update interval : 600 seconds

Latest write time : Feb 8 16:02:23 2014

Status : Last write succeeded.

Table 13 Command output

Field	Description
File name	Name of the DHCPv6 binding backup file.
Username	Username for accessing the URL of the remote backup file.
Password	Password for accessing the URL of the remote backup file. This field displays ****** if a password is configured.
Update interval	Waiting time in seconds after a DHCPv6 binding change for the DHCPv6 server to update the backup file.
Latest write time	Time of the latest update.
Status	Update state: · Writing—The backup file is being updated. · Last write succeeded—The backup file was successfully updated. · Last write failed—The backup file failed to be updated.

‌

display ipv6 dhcp server expired-ip

Use display ipv6 dhcp server expired-ip to display information about lease-expired IPv6 addresses.

Syntax

display ipv6 dhcp server expired-ip [ [ address ipv6-address | interface interface-type interface-number ] [ vpn-instance vpn-instance-name ] | mac mac-address | pool pool-name ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

address ipv6-address: Specifies an IPv6 address.

interface interface-type interface-number: Specifies an interface by its type and number.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays lease-expired IPv6 addresses for the public network.

mac mac-address: Specifies the MAC address of a lease.

pool pool-name: Specifies an IPv6 address pool by its name, a case-insensitive string of 1 to 63 characters.

verbose: Displays detailed information about lease-expired IPv6 addresses. If you do not specify this keyword, the command displays brief information about all lease-expired IPv6 addresses.

Usage guidelines

DHCPv6 assigns the expired IPv6 addresses to DHCPv6 clients when all available addresses have been assigned.

If you do not specify any parameters, this command displays brief information about all lease-expired IPv6 addresses on the public network.

Examples

# Display brief information about all lease-expired addresses.

<Sysname> display ipv6 dhcp server expired-ip

IPv6 address DUID Lease expiration

2001:3eff:fe80:4caa: 3030-3066-2e65-3230-302e- Apr 25 17:10:47 2019

37ee:7::1 3130-3234-2d45-7468-6572-

6e65-7430-2f31

# Display detailed information about all lease-expired IPv6 addresses.

<Sysname> display ipv6 dhcp server expired-ip verbose

IPv6 address: 2001:3eff:fe80:4caa:37ee:7::1

Pool name: 1

DUID: 3030-3066-2e65-3230-302e-3130-3234-2d45-7468-6572-6e65-7430-2f31

Hardware address type: Ethernet

Hardware address: 0000-0000-0002

Lease expiration: Apr 25 17:10:47 2019

Remaining reservation time: 136 years 2 months 6 hours 28 minutes 11 seconds

IPv6 address reservation mode: Based on client ID

Table 14 Command output

Field	Description
IPv6 address	Expired IPv6 address.
DUID	Client DUID bound to the expired IPv6 address.
Lease expiration	Time when the lease expired.
Pool name	Name of the IPv6 address pool.
Hardware address type	Hardware address type of the client: · Ethernet. · Token ring. · Unknown.
Hardware address	Hardware address of the client.
Remaining reservation time	Remaining time for reserving the expired IPv6 address.
IPv6 address reservation mode: Based on xx	Expired IPv6 address reservation mode.

‌

Related commands

ipv6 dhcp duid-mismatch offline

reset ipv6 dhcp server expired-ip

display ipv6 dhcp server expired-pd

Use display ipv6 dhcp server expired-pd to display information about lease-expired IPv6 prefixes.

Syntax

display ipv6 dhcp server expired-pd [ [ interface interface-type interface-number | prefix prefix/prefix-len ] [ vpn-instance vpn-instance-name ] | mac mac-address | pool pool-name ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

prefix prefix/prefix-len: Specifies a prefix and a prefix length. The value range for the prefix length is 1 to 128.

interface interface-type interface-number: Specifies an interface by its type and number.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays lease-expired IPv6 prefixes for the public network.

mac mac-address: Specifies the MAC address of a lease.

pool pool-name: Specifies an IPv6 address pool by its name, a case-insensitive string of 1 to 63 characters.

verbose: Displays detailed information about lease-expired IPv6 prefixes. If you do not specify this keyword, the command displays brief information about all lease-expired IPv6 prefixes.

Usage guidelines

DHCPv6 assigns the expired IPv6 prefixes to DHCPv6 clients when all available prefixes have been assigned.

If you do not specify any parameters, this command displays brief information about all lease-expired IPv6 prefixes.

Examples

# Display brief information about all lease-expired IPv6 prefixes.

<Sysname> display ipv6 dhcp server expired-pd

IPv6 PD DUID Lease expiration

2:1::/24 3030-3066-2e65-3230-302e- Apr 25 17:10:47 2019

3130-3234-2d45-7468-6572-

6e65-7430-2f31

# Display detailed information about all lease-expired IPv6 prefixes.

<Sysname> display ipv6 dhcp server expired-pd verbose

IPv6 PD: 2:1::/24

Pool name: 1

DUID: 3030-3066-2e65-3230-302e-3130-3234-2d45-7468-6572-6e65-7430-2f31

Hardware address type: Ethernet

Hardware address: 0000-0000-0002

Lease expiration: Apr 25 17:10:47 2019

Remaining reservation time: 136 years 2 months 6 hours 28 minutes 11 seconds

IPv6 prefix reservation mode: Based on DUID

Table 15 Command output

Field	Description
IPv6 PD	Expired IPv6 prefix.
DUID	DUID of the expired IPv6 prefix.
Lease expiration	Time when the lease expired.
Pool name	Name of the IPv6 address pool to which the expired IPv6 prefix belongs.
Hardware address type	Hardware address type of the client: · Ethernet. · Token ring. · Unknown.
Hardware address	Hardware address of the client.
Remaining reservation time	Remaining time for reserving the expired IPv6 prefix.
IPv6 prefix reservation mode	IPv6 prefix reservation mode: · Based on DUID. · Based on client MAC.

‌

Related commands

reset ipv6 dhcp server expired-pd

display ipv6 dhcp server free-ip

Use display ipv6 dhcp server free-ip to display information about the assignable IPv6 addresses in an IPv6 address pool.

Syntax

display ipv6 dhcp server free-ip [ pool pool-name | vpn-instance vpn-instance-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

pool pool-name: Specifies an IPv6 address pool by its name, a case-insensitive string of 1 to 63 characters. If you do not specify an IPv6 address pool, this command displays information about the assignable IPv6 addresses in all IPv6 address pools.

Examples

# Display information about the assignable IPv6 addresses in all IPv6 address pools.

<Sysname> display ipv6 dhcp server free-ip

Pool name: 1

Network: 2::/60

IPv6 ranges from 2::1 to 2::F:FFFF:FFFF:FFFF:FFFF

Pool name: 2

Network: 2::/125

IPv6 ranges from 2::/126 to 2::4/126

Pool name: 3

Network: 1::/125

IPv6 ranges from 1::/126 to 1::4/126

Table 16 Command output

Field	Description
Pool name	Name of the IPv6 address pool.
Network	Network segment that contains assignable IPv6 address ranges. The value behind the forward slash represents the prefix length.
IPv6 ranges from to	IPv6 address ranges that contain assignable IPv6 addresses.

‌

Related commands

ipv6 pool

network

display ipv6 dhcp server free-pd

Use display ipv6 dhcp server free-pd to display information about the assignable IPv6 prefixes in an IPv6 address pool.

Syntax

display ipv6 dhcp server free-pd [ pool pool-name | vpn-instance vpn-instance-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

Examples

# Display information about the assignable IPv6 prefixes in all IPv6 address pools.

<Sysname> display ipv6 dhcp server free-pd

Prefix-pool: 1

Prefix: 2002::/64

IPv6 Prefix ranges from 2002::/68 to 2002::F000:0:0:0/68

Table 17 Command output

Field	Description
Pool name	Name of the IPv6 address pool.
Prefix	Prefix range that contains assignable IPv6 prefixes.
IPv6 Prefix ranges	Assignable IPv6 prefix sub-ranges.

‌

Related commands

ipv6 pool

ipv6 dhcp prefix-pool

display ipv6 dhcp server ip-in-use

Use display ipv6 dhcp server ip-in-use to display binding information for assigned IPv6 addresses.

Syntax

display ipv6 dhcp server ip-in-use [ [ address ipv6-address | interface interface-type interface-number ] [ vpn-instance vpn-instance-name ] | pool pool-name | pool-group pool-group-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

address ipv6-address: Specifies an IPv6 address. If you do not specify an IPv6 address, this command displays binding information for all IPv6 addresses.

interface interface-type interface-number: Specifies an interface by its type and number.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays binding information about IPv6 addresses for the public network.

pool pool-name: Specifies an IPv6 address pool by its name, a case-insensitive string of 1 to 63 characters. If you do not specify an IPv6 address pool, this command displays IPv6 address binding information for all IPv6 address pools.

pool-group pool-group-name: Specifies an IPv6 address pool group by its name, a case-insensitive string of 1 to 63 characters. If you do not specify an IPv6 address pool group, this command displays IPv6 address binding information for all IPv6 address pool groups.

Examples

# Display binding information for all assigned IPv6 address.

<Sysname> display ipv6 dhcp server ip-in-use

Pool: 1

IPv6 address Type Lease expiration DUID

2:1::1 Auto(O) Jul 10 19:45:01 2021 0003000211df605b0300

Pool: 2

IPv6 address Type Lease expiration DUID

1:1::2 Static(F) Not available 0003000176e77e800100

Pool: 3

IPv6 address Type Lease expiration DUID

1:2::1F1 Static(O) Oct 9 09:23:31 2021 0003000154df605b0800

Pool: 4

IPv6 address Type Lease expiration DUID

1:2::2 Auto(Z) Oct 11 09:23:31 2021 0003000131df605b0100

# Display address binding information for IPv6 address pool 1.

<Sysname> display ipv6 dhcp server ip-in-use pool 1

Pool: 1

IPv6 address Type Lease expiration DUID

2:1::1 Auto(O) Jul 10 22:22:22 2021 0003000211df605b0300

3:1::2 Static(C) Jan 1 11:11:11 2021 0003000128df605b0700

# Display binding information for the specified IPv6 address.

<Sysname> display ipv6 dhcp server ip-in-use address 2:1::3

Pool: 1

Client: FE80::C800:CFF0:FE18:0

Type: Auto(O)

DUID: 00030001CA000C180000

IAID: 0x00030001

IPv6 address: 2:1::3

Preferred lifetime 400, valid lifetime 500

Expires at Mar 19 09:45:01 2021 (288 seconds left)

Relay: 100::10

Table 18 Command output

Field	Description
Pool	IPv6 address pool.
IPv6 address	IPv6 address assigned.
Type	IPv6 address binding types: · Static(F)—Free static binding whose IPv6 address has not been assigned. · Static(O)—Offered static binding whose IPv6 address has been selected and sent by the DHCPv6 server in a DHCPv6-OFFER packet to the client. · Static(C)—Committed static binding whose IPv6 address has been assigned to the client. · Auto(O)—Offered dynamic binding whose IPv6 address has been dynamically selected by the DHCPv6 server and sent in a DHCPv6-OFFER packet to the DHCPv6 client. · Auto(C)—Committed dynamic binding whose IPv6 address has been dynamically assigned to the DHCPv6 client. · Auto(Z)—Zombie dynamic binding whose IPv6 address has been dynamically assigned to the DHCPv6 client. The binding becomes zombie because the subnet prefix goes invalid for address allocation after a configuration recovery, for example, after a switchover from the backup to the master.
Lease-expiration	Time when the lease of the IPv6 address will expire. If the lease expires after the year 2100, this field displays Expires after 2100. For an unassigned static binding, this field displays Not available.
Client	IPv6 link-local address of the DHCPv6 client.
DUID	Client DUID.
IAID	Client IAID. For an unassigned static binding without IAID specified, this field displays N/A.
Preferred lifetime	Preferred lifetime in seconds of the IPv6 address.
valid lifetime	Valid lifetime in seconds of the IPv6 address.
Expires at	Time when the lease of an IPv6 address will expire. If the lease expires after the year 2100, this field displays Expires after 2100.
Relay	IPv6 address of the DHCPv6 relay interface. This field displays N/A if no DHCPv6 relay agent exits.

‌

Related commands

reset ipv6 dhcp server ip-in-use

display ipv6 dhcp server packet statistics

Use display ipv6 dhcp server packet statistics to display packet statistics on the DHCPv6 server.

Syntax

display ipv6 dhcp server packet statistics [ vpn-instance vpn-instance-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays DHCPv6 server packet statistics for the public network.

Examples

# Display packet statistics on the DHCPv6 server.

<Sysname> display ipv6 dhcp server packet statistics

Packets received: 0

Solicit: 0

Request: 0

Confirm: 0

Renew: 0

Rebind: 0

Release: 0

Decline: 0

Information-request: 0

Relay-forward: 0

Packets (non-ODAP) dropped: 0

ODAP Solicit: 0

ODAP Request: 0

ODAP Advertise: 0

ODAP Reply: 0

ODAP Release: 0

ODAP Renew: 0

ODAP ForceRenew: 0

ODAP Decline: 0

ODAP Rebind: 0

ODAP packets dropped: 0

Packets sent: 0

Advertise: 0

Reconfigure: 0

Reply: 0

Relay-reply: 0

ODAP Recv UpCpAddr: 0

ODAP Solicit: 0

ODAP Request: 0

ODAP Advertise: 0

ODAP Reply: 0

ODAP Release: 0

ODAP Renew: 0

ODAP ForceRenew: 0

ODAP Decline: 0

ODAP Rebind: 0

ODAP Send UpCpAddr: 0

Table 19 Command output

Field	Description
Packets received	DHCPv6 messages received from clients: · Solicit · Request · Confirm · Renew · Rebind · Release · Decline · Information-request · Relay-forward · ODAP Solicit · ODAP Request · ODAP Advertise · ODAP Reply · ODAP Release · ODAP Renew · ODAP ForceRenew · ODAP Decline · ODAP Rebind · ODAP packets dropped
Packets (non-ODAP) dropped	Number of DHCPv6 messages dropped by non-ODAP servers.
ODAP packets dropped	Number of DHCPv6 messages dropped by ODAP servers.
Packets sent	DHCPv6 messages sent to clients: · Advertise · Reconfigure · Reply · Relay-reply · ODAP Recv UpCpAddr · ODAP Solicit · ODAP Request · ODAP Advertise · ODAP Reply · ODAP Release · ODAP Renew · ODAP ForceRenew · ODAP Decline · ODAP Rebind · ODAP packets dropped · ODAP Send UpCpAddr

Related commands

reset ipv6 dhcp server packet statistics

display ipv6 dhcp server pd-in-use

Use display ipv6 dhcp server pd-in-use to display binding information for the assigned IPv6 prefixes.

Syntax

display ipv6 dhcp server pd-in-use [ pool pool-name | pool-group pool-group-name | [ interface interface-type interface-number | prefix prefix/prefix-len ] [ vpn-instance vpn-instance-name ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

pool pool-name: Specifies an IPv6 address pool by its name, a case-insensitive string of 1 to 63 characters. If you do not specify an IPv6 address pool, this command displays IPv6 prefix binding information for all IPv6 address pools.

pool-group pool-group-name: Specifies an IPv6 address pool group by its name, a case-insensitive string of 1 to 63 characters. If you do not specify an IPv6 address pool group, this command displays IPv6 prefix binding information for all IPv6 address pool groups.

interface interface-type interface-number: Specifies an interface by its type and number.

prefix prefix/prefix-len: Specifies an IPv6 prefix. The value range for the prefix length is 1 to 128. If you do not specify an IPv6 prefix, this command displays binding information for all IPv6 prefixes.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays binding information about IPv6 prefixes for the public network.

Examples

# Display all IPv6 prefix binding information.

<Sysname> display ipv6 dhcp server pd-in-use

Pool: 1

IPv6 prefix Type Lease expiration DUID

2:1::/24 Auto(O) Jul 10 19:45:01 2021 000300019a6ea1730100

Pool: 2

IPv6 prefix Type Lease expiration DUID

1:1::/64 Static(F) Not available 000300019a6ea1730100

Pool: 3

IPv6 prefix Type Lease expiration DUID

1:2::/64 Static(O) Oct 9 09:23:31 2021 000300019a6ea1730100

Pool: 4

IPv6 prefix Type Lease expiration DUID

12::/80 Auto(Z) Oct 17 09:34:59 2021 000300019a6ea1730100

# Display IPv6 prefix binding information for IPv6 address pool 1.

<Sysname> display ipv6 dhcp server pd-in-use pool 1

Pool: 1

IPv6 prefix Type Lease expiration DUID

2:1::/24 Auto(O) Jul 10 22:22:22 2021 000300019a6ea1730100

3:1::/64 Static(C) Jan 1 11:11:11 2021 000300019a6ea1730100

# Display binding information for prefix 2:1::3/24.

<Sysname> display ipv6 dhcp server pd-in-use prefix 2:1::3/24

Pool: 1

Client: FE80::C800:CFF:FE18:0

Type: Auto(O)

DUID: 00030001CA000C180000

IAID: 0x00030001

IPv6 prefix: 2:1::/24

Preferred lifetime 400, valid lifetime 500

Expires at Mar 19 09:45:01 2021 (288 seconds left)

Relay: 100::10

Table 20 Command output

Field	Description
IPv6 prefix	IPv6 prefix assigned.
Type	Prefix binding types: · Static(F)—Free static binding whose IPv6 prefix has not been assigned. · Static(O)—Offered static binding whose IPv6 prefix has been selected and sent by the DHCPv6 server in a DHCPv6-OFFER packet to the client. · Static(C)—Committed static binding whose IPv6 prefix has been assigned to the client. · Auto(O)—Offered dynamic binding whose IPv6 prefix has been dynamically selected by the DHCPv6 server and sent in a DHCPv6-OFFER packet to the DHCPv6 client. · Auto(C)—Committed dynamic binding whose IPv6 prefix has been dynamically assigned to the DHCPv6 client. · Auto(Z)—Zombie dynamic binding whose IPv6 prefix has been dynamically assigned to the DHCPv6 client. The binding becomes zombie because the prefix in the prefix pool goes invalid after a configuration recovery, for example, after a switchover from the backup to the master.
Pool	Address pool.
Lease-expiration	Time when the lease of the IPv6 prefix will expire. If the lease will expire after the year 2100, this field displays Expires after 2100. For an unassigned static binding, this field displays Not available.
Client	IPv6 link-local address of the DHCPv6 client.
DUID	Client DUID.
IAID	Client IAID. For an unassigned static binding without IAID, this field displays N/A.
Preferred lifetime	Preferred lifetime in seconds of the IPv6 prefix.
valid lifetime	Valid lifetime in seconds of the IPv6 prefix.
Expires at	Time when the lease of the prefix will expire. If the lease expires after the year 2100, this field displays Expires after 2100.
Relay	IPv6 address of the DHCPv6 relay interface. This field displays N/A if no DHCPv6 relay agent exits.

‌

Related commands

reset ipv6 dhcp server pd-in-use

display ipv6 dhcp server statistics

Use display ipv6 dhcp server statistics to display statistics on the DHCPv6 server.

Syntax

display ipv6 dhcp server statistics [ pool pool-name | vpn-instance vpn-instance-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

pool pool-name: Displays DHCPv6 packet statistics for the IPv6 address pool specified by its name, a case-insensitive string of 1 to 63 characters. If you do not specify an address pool, this command displays DHCPv6 server statistics for all address pools.

Usage guidelines

If you do not specify a parameter, this command displays statistics for all IPv6 pools on the DHCPv6 server.

Examples

# Display pool statistics on the DHCPv6 server.

<Sysname> display ipv6 dhcp server statistics

Pool number: 3

Bindings:

IP-in-use: 1

PD-in-use: 0

Expired IP: 0

Expired PD: 0

Reserve IP: 0

Reserve PD: 0

Conflicts: 0

# Display statistics for IPv6 address pool pool1.

<Sysname> display ipv6 dhcp server statistics pool pool1

Total IPv6 addresses: 255

Free IPv6 addresses: 235

Used IPv6 addresses: 20

Pool IPv6 address utilization: 7.84%

Total IPv6 prefixes: 0

Free IPv6 prefixes: 0

Used IPv6 prefixes: 0

Pool IPv6 prefix utilization: 0.00%

Bindings:

IP-in-use: 0

PD-in-use: 0

Expired IP: 0

Expired PD: 0

Reserve IP: 0

Reserve PD: 0

Conflicts: 0

Table 21 Command output

Field	Description
Pool number	Total number of IPv6 address pools.
Total IPv6 addresses	Total number of IPv6 addresses.
Free IPv6 addresses	Number of free IPv6 addresses.
Used IPv6 addresses	Number of assigned IPv6 addresses in the address pool.
Pool IPv6 address utilization	IPv6 address usage of the address pool.
Total IPv6 prefixes	Total number of IPv6 prefixes in the address pool.
Free IPv6 prefixes	Total number of free IPv6 prefixes in the address pool.
Used IPv6 prefixes	Total number of IPv6 prefixes that have been assigned.
Pool IPv6 prefix utilization	Prefix usage of the IPv6 address pool, in percentage.
Bindings	Number of bindings: · IP-in-use—Total number of IPv6 address bindings. · PD-in-use—Total number of prefix bindings. · Expired IP—Total number of expired IPv6 address bindings. · Expired PD—Total number of expired prefix bindings. · Reserve IP—Total number of reserved IPv6 address bindings. · Reserve PD—Total number of reserved prefix bindings.
Conflicts	Total number of conflicting addresses.

‌

Related commands

reset ipv6 dhcp server statistics

display ipv6 pool

Use display ipv6 pool to display information about IPv6 address pools.

Syntax

display ipv6 pool [ all | name pool-name | pool-group pool-group-name | vpn-instance vpn-instance-name ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Displays information about all IPv6 pools in the public network and VPN instances.

name pool-name: Specifies an IPv6 address pool by its name. The pool-name argument is a case-insensitive string of 1 to 63 characters.

pool-group pool-group-name: Specifies an IPv6 pool group by its name. The pool-group-name argument is a case-insensitive string of 1 to 63 characters

verbose: Displays detailed IPv6 pool information. If you do not specify this keyword, the command displays brief IPv6 pool information.

Examples

# Display brief information about IPv6 address pool 1.

<Sysname> display ipv6 pool name 1

DHCPv6 pool: 1 (lock)

Pool index: 1

Network: 3FFE:501:FFFF:100::/64

Preferred lifetime 604800 seconds, valid lifetime 2592000 seconds

Prefix pool: 1

Preferred lifetime 24000 seconds, valid lifetime 36000 seconds

Gateway list:

3FFE:501:FFFF:100::100/64

Addresses:

Range: from 3FFE:501:FFFF:100::1

to 3FFE:501:FFFF:100::99

Preferred lifetime 70480, valid lifetime 200000

Total address number: 153

Available: 153

In-use: 0

Temporary addresses:

Range: from 3FFE:501:FFFF:100::200

to 3FFE:501:FFFF:100::210

Preferred lifetime 60480, valid lifetime 259200

Total address number: 17

Available: 17

In-use: 0

Static bindings:

DUID: 0003000100e0fc000001

IAID: 0000003f

Prefix: 3FFE:501:FFFF:200::/64

Preferred lifetime 604800, valid lifetime 2592000

DUID: 0003000100e0fc00cff1

IAID: 00000001

Address: 3FFE:501:FFFF:2001::1/64

Preferred lifetime 604800, valid lifetime 2592000

Forbidden addresses:

1571::1

1571::8 1571::65

Forbidden prefixes:

1800::11/64

1800::22/64 1800::25/64

unr tag 50

unr preference 60

IP-in-use threshold: 50

PD-in-use threshold: 50

option 21 hex 21

DNS server addresses:

2::2

Domain name:

aaa.com

AFTR name:

bbb.com

SIP server addresses:

5::1

SIP server domain names:

ccc.com

exhaustion log enable

route-log enable

undo exhaustion trap enable

address-alloc-mode interface-id

# Display brief information about IPv6 address pool 2.

<Sysname> display ipv6 pool name 2

DHCPv6 pool: 2 (lock)

Pool index: 2

reserve expired-ipv6-address enable

reserve expired-ipv6-address mode duid time 4294967295 limit 256000

reserve expired-pd disable

reserve expired-pd mode duid time 4294967295 limit 256000

IP-in-use threshold: 100

PD-in-use threshold: 100

undo exhaustion log enable

route-log enable

exhaustion trap enable

address-alloc-mode interface-id

# Display brief information about a local BAS IPv6 address pool.

<Sysname> display ipv6 pool name bas6

DHCPv6 pool: bas6

Pool index: 3

reserve expired-ipv6-address enable

reserve expired-ipv6-address mode duid time 4294967295 limit 256000

reserve expired-pd disable

reserve expired-pd mode duid time 4294967295 limit 256000

IP-in-use threshold: 100

PD-in-use threshold: 100

undo exhaustion log enable

undo route-log enable

exhaustion trap enable

address-alloc-mode interface-id

# Display brief information about ODAP IPv6 address pool odap1.

<Sysname> display ipv6 pool name odap1

DHCPv6 pool: odap1

Pool index: 4

VPN instance:

Network: 83:1::/108 export-route

Preferred lifetime 3600 seconds, valid lifetime 3600 seconds

reserve expired-ipv6-address enable

reserve expired-ipv6-address mode duid time 4294967295 limit 256000

reserve expired-pd enable

reserve expired-pd mode mac time 4294967295 limit 256000

Prefix pool: 102

Preferred lifetime 3600 seconds, valid lifetime 3600 seconds

Forbidden addresses:

83:1::1001

Forbidden prefixes:

2021:83:1::/69

IP-in-use threshold: 100

PD-in-use threshold: 100

IP-subnet-in-use threshold: 100

PD-subnet-in-use threshold: 100

option 21 hex 21

exhaustion log enable

route-log enable

dynamic address assign-length 123

dynamic prefix assign-length 69

dynamic utilization mark high: 100

dynamic utilization mark low: 0

dynamic address idle-time: 10

dynamic prefix idle-time: 18

dynamic address alloc-mode: up-backup-profile

dynamic prefix alloc-mode: up-backup-profile

dynamic address export-route preference 65 tag 0

dynamic pd export-route preference 65 tag 0

exhaustion trap enable

address-alloc-mode interface-id

Table 22 Command output

Field	Description
DHCPv6 pool (lock)	Name of the IPv6 address pool. The field in parentheses represents the lock state of t he IPv6 pool. · lock —Locked in loose mode. The server responds to the lease renewal requests from online DHCPv6 clients for IPv6 addresses in the pool, but it does not assign IPv6 addresses from the pool to new DHCPv6 clients. · lock strict—Locked in strict mode. The server does not respond to the lease renewal requests from online DHCPv6 clients for IPv6 addresses in the pool or assign IPv6 addresses from the pool to new DHCPv6 clients. If you do not lock the IPv6 pool, this command will not display lock state information.
Pool index	Index of the IPv6 address pool.
VPN instance	VPN instance to which the IPv6 address pool belongs. If the IPv6 address pool belongs to the public network, this field is not available.
Network	IPv6 subnet for dynamic IPv6 address allocation. If the subnet prefix is ineffective, this field displays Not-available. If the subnet prefix becomes ineffective after a configuration recovery (for example, a switchover from the backup to the master), the prefix is marked (Zombie).
Prefix pool	Prefix pool used by the address pool.
Preferred lifetime	Preferred lifetime in seconds.
valid lifetime	Valid lifetime in seconds.
reserve expired-ipv6-address enable	Whether IPv6 address reservation is enabled. · reserve expired-ipv6-address enable—IPv6 address reservation is enabled. · reserve expired-ipv6-address disable—IPv6 address reservation is disabled.
reserve expired-ipv6-address mode duid/mac time 4294967295 limit 256000	IPv6 address reservation mode, amount of time for expired IPv6 addresses to be reserved, and the maximum number of IPv6 addresses that can be reserved in the IPv6 pool. In this example, the reservation mode is DUID or MAC address, the amount of reservation time is 4294967295 seconds, and the maximum number of IP addresses is 256000.
reserve expired-pd disable	Whether IPv6 prefix reservation is enabled. · reserve expired-pd enable—IPv6 prefix reservation is enabled. · reserve expired-pd disable—IPv6 prefix reservation is disabled.
reserve expired-pd mode duid/mac time 4294967295 limit 256000	IPv6 prefix reservation mode, amount of time for expired IPv6 prefixes to be reserved, and the maximum number of IPv6 prefixes that can be reserved in the IPv6 pool. In this example, the reservation mode is DUID or MAC address, the amount of reservation time is 4294967295 seconds, and the maximum number of IP addresses is 256000.
Gateway list	Gateway addresses specified for clients that match the IPv6 address pool.
Addresses	Non-temporary IPv6 address range.
Range	IPv6 address range for dynamic allocation.
Total address number	Total number of IPv6 addresses.
Available	Total number of available IPv6 addresses.
In-use	Total number of assigned IPv6 addresses.
Temporary addresses	Temporary IPv6 address range for dynamic allocation.
Static bindings	Static bindings configured in the address pool.
DUID	Client DUID.
IAID	Client IAID. If no IAID is configured, this field displays Not configured.
Prefix	IPv6 address prefix.
Address	Static IPv6 address.
Forbidden addresses	IPv6 addresses excluded from DHCP allocation.
Forbidden prefixes	IPv6 prefixes excluded from DHCP allocation.
unr tag	IPv6 UNR tag value for the IPv6 address pool.
unr preference	IPv6 UNR preference value for the IPv6 address pool.
IP-in-use threshold	IPv6 address usage threshold for the IPv6 address pool.
PD-in-use threshold	IPv6 prefix usage threshold for the IPv6 address pool.
option	User-defined DCHPv6 option of the IPv6 address pool.
DNS server addresses	DNS server address.
Domain name	Domain name.
AFTR name	AFTR domain name.
active remote server	This field is available only after you create a remote BAS IPv6 pool on the relay agent and use the remote-server command to specify remote DHCPv6 servers for that pool. · If this field displays all, the relay agent uses the poll algorithm for DHCPv6 server selection. It forwards DHCPv6 requests to all DHCPv6 servers at the same time. · If this field displays an IPv6 address, the relay agent uses the master-backup algorithm for DHCPv6 server selection. It forwards DHCPv6 requests to the active DHCPv6 server that uses the displayed IPv6 addresses. For more information about DHCPv6 server selection algorithms, see the remote-server algorithm command.
remote server pool status	Status of the remote BAS IPv6 pool. · Available—The pool has assignable IPv6 addresses. · Unavailable—The pool has no assignable IPv6 addresses.
SIP server addresses	Addresses of SIP servers.
SIP server domain names	Domain names of SIP servers.
exhaustion log enable	IPv6 resource exhaustion logging is enabled to record IPv6 resource exhaustion events or recoveries from the resource exhaustion state. If this feature is disabled, this field displays undo exhaustion log enable.
route-log enable	Route logging is enabled for the IPv6 address pool. If route logging is disabled, this field displays undo route-log enable.
exhaustion trap enable	IPv6 resource exhaustion alarming is enabled. If this feature is disabled, this field displays undo exhaustion trap enable.
address-alloc-mode	IPv6 address mode specified for the IPv6 address pool: · eui-64—EUI-64-based allocation. · interface-id—interface ID-based allocation.

‌

# Display detailed information about all pools.

<Sysname> display ipv6 pool verbose

DHCPv6 pool: pool1 (lock)

Pool index: 1

Network: Not available

Preferred lifetime 604800 seconds, valid lifetime 2592000 seconds

reserve expired-ipv6-address enable

reserve expired-ipv6-address mode duid time 4294967295 limit 256000

reserve expired-pd disable

reserve expired-pd mode duid time 4294967295 limit 256000

Static bindings:

DUID: 0003000100e0fc005552

IAID: Not configured

Prefix: 10::/64

Preferred lifetime 604800 seconds, valid lifetime 2592000 seconds

IP-in-use threshold: 100

PD-in-use threshold: 100

option 21 hex 21

undo exhaustion log enable

route-log enable

exhaustion trap enable

address-alloc-mode interface-id

IPv6 address statistics

Total IPv6 addresses: 0

Free IPv6 addresses: 0

Used IPv6 addresses: 0

Pool IPv6 address utilization: 0.00%

Total IPv6 prefixes: 0

Free IPv6 prefixes: 0

Used IPv6 prefixes: 0

Pool IPv6 prefix utilization: 0.00%

Bindings:

IP-in-use: 0

PD-in-use: 0

Expired IP: 0

Expired PD: 0

Reserve IP: 0

Reserve PD: 0

Conflicts: 0

Table 23 Command output

Field	Description
DHCPv6 pool (lock)	Name of the IPv6 address pool. The field in parentheses represents the lock state of the IPv6 pool. · lock—Locked in loose mode. The server responds to the lease renewal requests from online DHCPv6 clients for IPv6 addresses in the pool, but it does not assign IPv6 addresses from the pool to new DHCPv6 clients. · lock strict—Locked in strict mode. The server does not respond to the lease renewal requests from online DHCPv6 clients for IPv6 addresses in the pool or assign IPv6 addresses from the pool to new DHCPv6 clients. If you do not lock the IPv6 pool, this command will not display lock state information.
Pool index	Index of the IPv6 address pool.
Network	IPv6 subnet for dynamic IPv6 address allocation. If the subnet prefix is ineffective, this field displays Not-available. If the subnet prefix becomes ineffective after a configuration recovery (for example, a switchover from the backup to the master), the prefix is marked (Zombie).
Preferred lifetime	Preferred lifetime in seconds.
valid lifetime	Valid lifetime in seconds.
reserve expired-ipv6-address enable	Whether IPv6 address reservation is enabled. · reserve expired-ipv6-address enable—IPv6 address reservation is enabled. · reserve expired-ipv6-address disable—IPv6 address reservation is disabled.
reserve expired-ipv6-address mode duid/mac time 4294967295 limit 256000	IPv6 address reservation mode, amount of time for expired IPv6 addresses to be reserved, and the maximum number of IPv6 addresses that can be reserved in the IPv6 pool. In this example, the reservation mode is DUID or MAC address, the amount of reservation time is 4294967295 seconds, and the maximum number of IP addresses is 256000.
reserve expired-pd disable	Whether IPv6 prefix reservation is enabled. · reserve expired-pd enable—IPv6 prefix reservation is enabled. · reserve expired-pd disable—IPv6 prefix reservation is disabled.
reserve expired-pd mode duid/mac time 4294967295 limit 256000	IPv6 prefix reservation mode, amount of time for expired IPv6 prefixes to be reserved, and the maximum number of IPv6 prefixes that can be reserved in the IPv6 pool. In this example, the reservation mode is DUID or MAC address, the amount of reservation time is 4294967295 seconds, and the maximum number of IP addresses is 256000.
Static bindings	Static bindings configured in the IPv6 pool.
DUID	Client DUID.
IAID	Client IAID. If no IAID is configured, this field displays Not configured.
Prefix	IPv6 prefix.
route-log enable	Route logging is enabled for the IPv6 address pool. If route logging is disabled, this field displays undo route-log enable.
IPv6 address statistics	IPv6 address statistics in the pool.
Total IPv6 addresses	Total number of IPv6 addresses in the pool.
Free IPv6 addresses	Number of free IPv6 addresses in the pool.
Used IPv6 addresses	Number of assigned IPv6 addresses in the address pool.
Pool IPv6 address utilization	Address usage of the IPv6 address pool.
Total IPv6 prefixes	Total number of IPv6 prefixes in the address pool.
Free IPv6 prefixes	Number of free IPv6 prefixes in the address pool.
Used IPv6 prefixes	Number of assigned IPv6 prefixes in the address pool.
Pool IPv6 prefix utilization	Prefix usage of the address pool.
Bindings	Number of bindings by binding type: · IP-in-use—Total number of IPv6 address bindings. · PD-in-use—Total number of prefix bindings. · Expired IP—Total number of expired IPv6 address bindings. · Expired PD—Total number of expired prefix bindings. · Reserve IP—Total number of reserved IPv6 address bindings. · Reserve PD—Total number of reserved prefix bindings.
Conflicts	Total number of conflicting addresses.

‌

Related commands

ipv6 pool

display ipv6 pool-group

Use display ipv6 pool-group to display information about IPv6 pool groups.

Syntax

display ipv6 pool-group [ all | [ name pool-group-name ] [ vpn-instance vpn-instance-name ] ] [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Displays information about all IPv6 pool groups and all IPv6 pools in these groups in the public network and VPN instances.

name pool-group-name: Specifies an IPv6 address pool group name, a case-insensitive string of 1 to 63 characters. If you do not specify this option, the command displays information about all IPv6 pool groups.

verbose: Displays detailed information about an IPv6 pool group and its IPv6 pools. If you do not specify this keyword, the command displays brief information about an IPv6 pool group and its IPv6 pools.

Examples

# Display information about IPv6 address pool group group1.

<Sysname> display ipv6 pool-group name group1

Pool-group: group1

VPN instance name: abc

Used IPv6 addresses: 0

Used IPv6 prefixes: 0

Current IPv6 pool for address allocation: N/A

Current IPv6 pool for prefix allocation: N/A

IP-in-use threshold: 100

Undo Exhaustion trap enable

Undo Exhaustion log enable

Current DHCPv6 relay IPv6 pool: N/A

Static bindings: 0

Bind pools: 1

pool2 priority 1

# Display information about all IPv6 address pool groups on the public network.

<Sysname> display ipv6 pool-group

Pool-group: group2

VPN instance name: N/A

Used IPv6 addresses: 0

Used IPv6 prefixes: 0

Current IPv6 pool for address allocation: N/A

Current IPv6 pool for prefix allocation: N/A

IP-in-use threshold: 100

Undo Exhaustion trap enable

Undo Exhaustion log enable

Current DHCPv6 relay IPv6 pool: N/A

Static bindings: 0

Bind pools: 2

Pool3 priority 2

Pool4 priority 3

Pool-group: group3

VPN instance name: N/A

Used IPv6 addresses: 0

IP-in-use threshold: 100

Undo Exhaustion trap enable

Undo Exhaustion log enable

Static bindings: 0

Bind pools: 3

Pool4 priority 4

Pool5 priority 5

Pool6 priority 6

Table 24 Command output

Field	Description
Pool-group	Name of the DHCPv6 address pool group.
VPN instance name	Name of the VPN instance to which the IPv6 address pool group is applied. This field displays N/A if the IPv6 address pool group is on the public network.
Used IPv6 addresses	Number of allocated IPv6 addresses in the address pool group.
Used IPv6 prefixes	Number of allocated IPv6 prefixes in the IPv6 address pool group.
Current IPv6 pool for address allocation	IPv6 address pool that is currently used for IPv6 address allocation in the pool group. If the pool group does not have any IPv6 address pools, this field displays N/A.
Current IPv6 pool for prefix allocation	IPv6 address pool that is currently used for IPv6 prefix allocation in the pool group. If no IPv6 address pool is in use, this field displays N/A.
IP-in-use threshold	Address usage threshold for the IPv6 address pool group, in percentage.
Undo exhaustion trap enable	IPv6 resource exhaustion alarming is disabled for the IPv6 address pool group. If this feature is enabled, this field displays Exhaustion trap enable.
Undo exhaustion log enable	IPv6 resource exhaustion logging is disabled for the IPv6 address pool group. If this feature is enabled, this field displays Exhaustion log enable.
Current DHCPv6 relay IPv6 pool	DHCPv6 relay address pool that is currently used in the pool group. If no DHCPv6 relay address pool is in use, this field displays N/A.
Static bindings	Number of statically bound IPv6 addresses in the address pool group.
Bind pools	Number of bound IPv6 address pools, pool names, and pool priority. Each line displays one pool and its priority.

‌

# Display detailed information about all IPv6 pool groups and their IPv6 pools on the public network.

<Sysname> display ipv6 pool-group verbose

Pool-group: aaa

VPN instance name: N/A

Used IPv6 addresses: 0

Used IPv6 prefixes: 1

Current IPv6 pool for address allocation: pool1

Current IPv6 pool for prefix allocation: pool1

IP-in-use threshold: 100

Undo Exhaustion trap enable

Undo Exhaustion log enable

IPv6 pool group address usage: 0.00%

IPv6 pool group pd usage: 100.00%

Current DHCPv6 relay IPv6 pool: N/A

Static bindings: 0

Bind Pools: 1

pool1

DHCPv6 pool: pool1

Pool index: 1

Pool-group-name:

chris

reserve expired-ipv6-address disable

reserve expired-ipv6-address mode duid time 4294967295 limit 256000

reserve expired-pd enable

reserve expired-pd mode duid time 4294967295 limit 256000

Static bindings:

DUID: 0003000100e0fc005552

IAID: Not configured

Prefix: 10::/64

Preferred lifetime 604800 seconds, valid lifetime 2592000 seconds

IP-in-use threshold: 100

PD-in-use threshold: 100

exhaustion log enable

undo route-log enable

undo exhaustion trap enable

IPv6 address statistics

Total IPv6 addresses: 255

Free IPv6 addresses: 235

Used IPv6 addresses: 20

Pool IPv6 address utilization: 7.84%

Total IPv6 prefixes: 0

Free IPv6 prefixes: 0

Used IPv6 prefixes: 0

Pool IPv6 prefix utilization: 0.00%

Bindings:

IP-in-use: 0

PD-in-use: 1

Expired IP: 0

Expired PD: 0

Reserve IP: 0

Reserve PD: 0

Conflicts: 0

Table 25 Command output

Field	Description
Pool-group	Name of the IPv6 pool group.
VPN instance name	‌Name of the VPN instance to which the IPv6 pool group is applied. This field displays N/A if the IPv6 pool group is on the public network.
Used IPv6 addresses	Number of allocated IPv6 addresses in the pool group.
Used IPv6 prefixes	Number of allocated IPv6 prefixes in the pool group.
Current IPv6 pool for address allocation	IPv6 address pool that is currently used for IPv6 address allocation in the pool group. If the pool group does not have any IPv6 address pools, this field displays N/A.
Current IPv6 pool for prefix allocation	IPv6 address pool that is currently used for IPv6 prefix allocation in the pool group. If no IPv6 address pool is in use, this field displays N/A.
IP-in-use threshold	Address usage threshold for the IPv6 address pool group, in percentage.
Undo exhaustion trap enable	IPv6 resource exhaustion alarming is disabled for the IPv6 address pool group. If this feature is enabled, this field displays Exhaustion trap enable.
Undo exhaustion log enable	IPv6 resource exhaustion logging is disabled for the IPv6 address pool group. If this feature is enabled, this field displays Exhaustion log enable.
IPv6 pool group address usage	Address usage of the IPv6 pool group.
IPv6 pool group pd usage	Prefix usage of the IPv6 pool group.
Current DHCPv6 relay IPv6 pool	DHCPv6 relay address pool that is currently used in the pool group. If no DHCPv6 relay address pool is in use, this field displays N/A.
Static bindings	Number of statically bound IPv6 addresses in the address pool group.
Bind pools	Number of bound IPv6 address pools, pool names, and pool priority. Each line displays one pool and its priority.
DHCPv6 pool	Information about IPv6 pools in the pool group. For more information about IPv6 pool fields, see Table 23.

‌

Related commands

ipv6 pool-group

dns-server

Use dns-server to specify a DNS server in an IPv6 address pool.

Use undo dns-server to remove the specified DNS server from an IPv6 address pool.

Syntax

dns-server ipv6-address

undo dns-server ipv6-address

Default

No DNS server address is specified.

Views

IPv6 address pool view

DHCPv6 option group view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies the IPv6 address of a DNS server.

Usage guidelines

You can use the dns-server command to specify up to eight DNS servers in an address pool. A DNS server specified earlier has a higher preference.

Examples

# Specify the DNS server address 2:2::3 in IPv6 address pool 1.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] dns-server 2:2::3

Related commands

display ipv6 pool

domain-name

Use domain-name to specify a domain name in an IPv6 address pool.

Use undo domain-name to restore the default.

Syntax

domain-name domain-name

undo domain-name

Default

No domain name is specified.

Views

IPv6 address pool view

DHCPv6 option group view

Predefined user roles

network-admin

Parameters

domain-name: Specifies a domain name, a case-sensitive string of 1 to 50 characters.

Usage guidelines

You can configure only one domain name in an address pool. If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify the domain name aaa.com in IPv6 address pool 1.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] domain-name aaa.com

Related commands

display ipv6 pool

exhaustion log enable

Use exhaustion log enable to enable IPv6 resource exhaustion logging for an IPv6 address pool or pool group.

Use undo exhaustion log enable to restore the default.

Syntax

exhaustion log enable

undo exhaustion log enable

Default

IPv6 resource exhaustion logging is disabled for an IPv6 address pool or pool group.

Views

IPv6 address pool view

IPv6 address pool group view

Predefined user roles

network-admin

Usage guidelines

This feature enables t he DHCPv6 module to send IPv6 resource exhaustion log messages to the information center. For log messages to be sent correctly, configure the information center to set log message filtering and output rules, including output destinations. For information about the information center configuration, see Network Management and Monitoring Configuration Guide.

IPv6 resource exhaustion events include IPv6 resource exhaustion alarms and recoveries from IPv6 resource exhaustion alarm conditions.

An IPv6 resource exhaustion log message is generated when an IPv6 address pool or pool group encounters one of the following events:

· The pool or pool group does not have assignable address resources or prefix resources.

· The IPv6 address usage, subnet usage, prefix usage, or prefix range usage of the pool or pool group drops to or below 90% after exhaustion.

You can use the following formulas to calculate the IPv6 resource usage of an IPv6 address pool or pool group:

· IPv6 address usage = (total number of IPv6 addresses – number of assignable IPv6 addresses )/total number of IPv6 addresses

· IPv6 prefix usage = (total number of IPv6 prefixes – number of assignable IPv6 prefixes)/total number of IPv6 prefixes

Examples

# Enable IPv6 resource exhaustion logging for IPv6 address pool pool1.

<Sysname> system-view

[Sysname] ipv6 pool pool1

[Sysname-ipv6-pool-pool1] exhaustion log enable

# Enable IPv6 resource exhaustion logging for IPv6 address pool group group1.

<Sysname> system-view

[Sysname] ipv6 pool-group group1

[Sysname-ipv6-group-group1] exhaustion log enable

Related commands

display ipv6 pool

exhaustion trap enable

Use exhaustion trap enable to e n able IPv6 resource exhaustion alarming for an IPv6 address pool or pool group.

Use undo exhaustion trap enable to disable IPv6 resource exhaustion alarming for an IPv6 address pool or pool group.

Syntax

exhaustion trap enable

undo exhaustion trap enable

Default

IPv6 resource exhaustion alarming is enabled for IPv6 address pools.

IPv6 resource exhaustion alarming is disabled for IPv6 address pool groups.

Views

IPv6 address pool view

IPv6 address pool group view

Predefined user roles

network-admin

Usage guidelines

This feature enables the device to generate a notification when the IPv6 resource usage of an IPv6 address pool or pool group reaches 100%.

You can use the following formulas to calculate the IPv6 resource usage of an IPv6 address pool or pool group:

· IPv6 address usage = (total number of IPv6 addresses – number of assignable IPv6 addresses )/total number of IPv6 addresses

· IPv6 prefix usage = (total number of IPv6 prefixes – number of assignable IPv6 prefixes)/total number of IPv6 prefixes

This feature can take effect only after you enable SNMP notifications for the DHCPv6 server by using one of the following commands:

· snmp-agent trap enable ipv6 dhcp server address-exhaust pd-exhaust

This command takes effect on all IPv6 address pools on the DHCPv6 server. The DHCPv6 server might generate too many IPv6 resource exhaustion notifications. To reduce the number of alarm notifications, disable IPv6 resource exhaustion alarming for some IPv6 address pools by using the undo exhaustion trap enable command.

· snmp-agent trap enable ipv6 dhcp server pool-group-exhaust

Examples

# Disable IPv6 resource exhaustion alarming for IP v6 address pool pool1.

<Sysname> system-view

[Sysname] ipv6 pool pool1

[Sysname-ipv6-pool-pool1] undo exhaustion trap enable

# Disable IPv6 resource exhaustion alarming for IPv6 address pool group group1.

<Sysname> system-view

[Sysname] ipv6 pool-pool group1

[Sysname-ipv6-pool-group-group 1] exhaustion trap enable

Related commands

display ipv6 pool

snmp-agent trap enable ipv6 dhcp server

export host-route

Use export host-route to enable host route advertisement.

Use undo export host-route to disable host route advertisement.

Syntax

export host-route [ ipv6-address | nd-prefix | pd-prefix ] *

undo export host-route [ ipv6-address | nd-prefix | pd-prefix ] *

Default

Host route advertisement is disabled.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

ipv6-address: Advertises host routes for IPv6 addresses.

nd-prefix: Advertises host routes for ND prefixes.

pd-prefix: Advertises host routes for IPv6 prefixes.

Usage guidelines

The network export-route command enables the DHCPv6 server to advertise the network route for an assigned IPv6 address/prefix in the pool. If multiple pools share the same network segment, the same network route will be advertised for assigned IPv6 addresses/prefixes in these address pools. This will make the clients using these IPv6 addresses/prefixes become inaccessible to external devices. To resolve this issue, enable host route advertisement for each IPv6 address pool to advertise a host route for each assigned IPv6 address/prefix.

Before you enable host route advertisement for an IPv6 address pool, make sure this pool has not assigned any IPv6 addresses/prefixes.

Examples

# Enable host route advertisement for IPv6 address pool 1.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] export host-route

Related commands

ipv6 pool

forbidden-address

Use forbidden-address to exclude IPv6 addresses from DHCP allocation in an IPv6 address pool.

Use undo forbidden-address to remove the configuration.

Syntax

forbidden-address start-ipv6-address [ end-ipv6-address ]

undo forbidden-address start-ipv6-address [ end-ipv6-address ]

Default

Except for the DHCPv6 server address, all IPv6 addresses in an IPv6 address pool are assignable.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

start-ipv6-address: Specifies the start IPv6 address.

end-ipv6-address: Specifies the end IPv6 address, which cannot be lower than start-ipv6-address. If you do not specify an end IPv6 address, only the start IPv6 address is excluded from DHCP allocation. If you specify an end IPv6 address, the IP addresses from start-ipv6-address through end-ipv6-address are all excluded from DHCP allocation.

Usage guidelines

The excluded IPv6 addresses in an IPv6 address pool are still assignable in other IPv6 address pools. You can exclude multiple IPv6 addresses in an IPv6 address pool by executing this command multiple times.

If the undo forbidden-address command contains fewer addresses than an existing excluded address range, the IPv6 address range in the undo command becomes assignable again. If the undo forbidden-address command contains more addresses than an existing excluded address range, the undo command removes the configuration of the excluded address range.

Excluded IPv6 address ranges in one IPv6 address pool can overlap. Excluded IPv6 address ranges in different IPv6 address pools cannot overlap.

Examples

# Exclude IPv6 address range 1::1 to 1::2 from DHCP allocation.

<Sysname> system-view

[Sysname] ipv6 pool aaa

[Sysname-ipv6-pool-aaa] forbidden-address 1::1 1::2

Related commands

network

forbidden-prefix

Use forbidden-prefix to exclude IPv6 prefixes from DHCP allocation in an IPv6 address pool.

Use undo forbidden-prefix to remove the configuration.

Syntax

forbidden-prefix start-prefix/prefix-len [ end-prefix/prefix-len ]

undo forbidden-prefix start-prefix/prefix-len [ end-prefix/prefix-len ]

Default

No IPv6 prefixes are excluded from DHCP allocation in an IPv6 prefix pool.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

start-prefix/prefix-len: Specifies the start IPv6 prefix. The prefix-len argument specifies the prefix length in the range of 1 to 128.

end-prefix/prefix-len: Specifies the end IPv6 prefix. The prefix-len argument specifies the prefix length in the range of 1 to 128. The value for end-prefix cannot be lower than that for start-prefix. If you do not specify this argument, only the start-prefix/prefix-len is excluded from DHCP allocation. If you specify this argument, the prefixes from start-prefix/prefix-len to end-prefix/prefix-len are all excluded.

Usage guidelines

The excluded IPv6 prefixes in an IPv6 address pool are still assignable in other IPv6 address pools. You can exclude multiple IPv6 prefixes in an IPv6 address pool by executing this command multiple times.

If the undo forbidden-prefix command contains fewer prefixes than an existing excluded prefix range, the IPv6 prefix range in the undo command becomes assignable again. If the undo forbidden-prefix command contains more prefixes than an existing excluded prefix range, the undo command removes the configuration of the excluded prefix range.

Excluded IPv6 prefix ranges in one IPv6 address pool can overlap. Excluded IPv6 prefix ranges in different IPv6 address pools cannot overlap.

Examples

# Exclude IPv6 prefix range 1:1::/64 to 1:2::/64 from DHCP allocation.

<Sysname> system-view

[Sysname] ipv6 pool aaa

[Sysname-ipv6-pool-aaa] forbidden-prefix 1:1::/64 1:2::/64

Related commands

ipv6 dhcp prefix-pool

prefix-pool

if-match

Use if-match to configure a match rule for a DHCPv6 user class.

Use undo if-match to delete a match rule for a DHCPv6 user class.

Syntax

if-match rule rule-number { option option-code [ ascii ascii-string [ offset offset | partial ] | hex hex-string [ mask mask | offset offset length length | partial ] ] | relay-agent gateway-ipv6-address }

undo if-match rule rule-number

Default

No match rules are configured for the DHCPv6 user class.

Views

DHCPv6 user class view

Predefined user roles

network-admin

Parameters

rule rule-number: Assigns the match rule an ID in the range of 1 to 16. A smaller ID represents a higher match priority.

option option-code: Specifies a DHCPv6 option by its number in the range of 1 to 65535.

ascii ascii-string: Specifies an ASCII string of 1 to 128 characters.

offset offset: Specifies the offset in bytes after which the match operation starts. The value range is 0 to 65534. If you specify an ASCII string, a packet matches the rule if the option content after the offset is the same as the ASCII string. If you specify a hexadecimal number, a packet matches the rule if the option content of the specified length after the offset is the same as the hexadecimal number.

partial: Enables partial match. A packet matches the rule if the specified option in the packet contains the ASCII string or hexadecimal number specified in the rule. For example, if you specify abc in the rule, option content xabc, xyzabca, xabcyz, and abcxyz all match the rule.

hex hex-string: Specifies a hexadecimal number. The length of the hexadecimal number must be an even number in the range of 2 to 256.

mask mask: Specifies the mask for the match operation. The mask is a hexadecimal number whose length is an even number in the range of 2 to 256 and must be the same as the hex-string length. The DHCPv6 server selects option content of the mask length from the start and ANDs the selected option content and the specified hexadecimal number with the mask. The packet matches the rule if the two AND operation results are the same.

length length: Specifies the length of the option content to be matched, in the range of 1 to 128 bytes. The length must be the same as the hex-string length.

relay-agent gateway-ipv6-address: Specifies a link-address field value. The value is an IPv6 address. A packet matches the rule if its link-address field value is the same as that in the rule.

Usage guidelines

If a DHCPv6 request sent by a DHCPv6 client matches a rule in a DHCPv6 user class, the DHCPv6 client matches the user class.

You can configure multiple match rules for a DHCPv6 user class. Each match rule is uniquely identified by a rule ID within its type (option or relay agent address).

· If the rule that you are configuring has the same ID and type as an existing rule, the new rule overwrites the existing rule.

· If the rule that you are configuring has the same ID as an existing rule but a different type, the new rule takes effect and coexists with the existing rule. As a best practice, do not assign the same ID to rules of different types.

· Rules of different IDs cannot have the same rule content.

When you configure an if-match option rule, follow these guidelines:

· To match packets that contain an option, specify only the option-code argument.

· To match a hexadecimal number by AND operations, specify the option option-code hex hex-string mask mask options.

· To match a hexadecimal number directly, specify the option option-code hex hex-string [ offset offset length length | partial ] options. If you do not specify the offset, length, or partial parameter, a packet matches a rule if the option content starts with the hexadecimal number.

· To match an ASCII string, specify the option option-code ascii ascii-string [ offset offset | partial ] options. If you do not specify the offset or partial parameter, a packet matches a rule if the option content starts with the ASCII string.

Examples

# Configure match rule 1 for the DHCPv6 user class exam to match DHCPv6 requests that contain Option 16.

<Sysname> system-view

[Sysname] ipv6 dhcp class exam

[Sysname-dhcp6-class-exam] if-match rule 1 option 16

# Configure match rule 2 for the DHCPv6 user class exam. The rule matches DHCPv6 requests in which the highest bit of the fourth byte in Option 16 is the hexadecimal number 1.

<Sysname> system-view

[Sysname] ipv6 dhcp class exam

[Sysname-dhcp6-class-exam] if-match rule 2 option 16 hex 00000080 mask 00000080

# Configure match rule 3 for the DHCPv6 user class exam. The rule matches DHCPv6 requests in which the first three bytes of Option 16 are the hexadecimal number 13ae92.

<Sysname> system-view

[Sysname] ipv6 dhcp class exam

[Sysname-dhcp6-class-exam] if-match rule 3 option 16 hex 13ae92 offset 0 length 3

# Configure match rule 4 for the DHCPv6 user class exam. The rule matches DHCPv6 requests in which the Option 16 contains the hexadecimal number 13ae.

<Sysname> system-view

[Sysname] ipv6 dhcp class exam

[Sysname-dhcp6-class-exam] if-match rule 5 option 16 hex 13ae partial

# Configure match rule 5 for the DHCPv6 user class exam to match DHCPv6 requests in which the link-address field is 2001::1.

<Sysname> system-view

[Sysname] ipv6 dhcp class exam

[Sysname-dhcp6-class-exam] if-match rule 5 relay-agent 2001::1

Related commands

ipv6 dhcp class

ip-in-use threshold

Use ip-in-use threshold to set the IPv6 address usage threshold for an IPv6 address pool or pool group.

Use undo ip-in-use threshold to restore the default.

Syntax

ip-in-use threshold threshold-value

undo ip-in-use threshold

Default

The IPv6 address usage threshold for an IPv6 address pool or pool group is 100%.

Views

IPv6 pool view

IPv6 address pool group view

Predefined user roles

network-admin

Parameters

threshold-value: Specifies the IPv6 address usage threshold, in percentage. The value range for this argument is 0 to 100.

Usage guidelines

The DHCPv6 module sends an SNMP notification to the SNMP module and a log message to the information center when one of the following events occurs:

· The IPv6 address usage of an IPv6 address pool or pool group reaches or exceeds the threshold.

· The IPv6 address usage of an IPv6 address pool or pool group drops below 90% of the threshold after a threshold violation.

To send SNMP notifications about these events, use the snmp-agent trap enable ipv6 dhcp server command to configure the DHCPv6 module. For DHCP notifications to be sent correctly, you must configure the SNMP module on the device. For more information about configuring the SNMP module, see Network Management and Monitoring Configuration Guide.

With the information center, you can set log message filtering and output rules, including output destinations. For more information about configuring the information center, see Network Management and Monitoring Configuration Guide.

You can review and analyze these notifications and log messages to determine the actions to take. For example, you can expand the address pool or pool group to accommodate all users.

If you execute this command multiple times in the same IPv6 pool view, the most recent configuration takes effect.

Examples

# Set the IPv6 address usage threshold for IPv6 address pool pool1 to 75%.

<Sysname> system-view

[Sysname] ipv6 pool pool1

[Sysname-ipv6-pool-pool1] ip-in-use threshold 75

# Set the IPv6 address usage threshold for IPv6 address pool group group1 to 75%.

<Sysname> system-view

[Sysname] ipv6 pool-group group1

[Sysname-ipv6-pool-group-group1] ip-in-use threshold 75

Related commands

snmp-agent trap enable ipv6 dhcp server

ipv6 dhcp apply-policy

Use ipv6 dhcp apply-policy to apply a DHCPv6 policy to an interface.

Use undo ipv6 dhcp apply-policy to restore the default.

Syntax

ipv6 dhcp apply-policy policy-name

undo ipv6 dhcp apply-policy

Default

No DHCPv6 policy is applied to an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

policy-name: Specifies a DHCPv6 policy by its name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

You can apply only one DHCPv6 policy to an interface. If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Apply the DHCPv6 policy test to Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp apply-policy test

Related commands

ipv6 dhcp class

Use ipv6 dhcp class to create a DHCPv6 user class and enter its view, or enter the view of an existing DHCPv6 user class.

Use undo ipv6 dhcp class to delete the specified DHCPv6 user class.

Syntax

ipv6 dhcp class class-name

undo ipv6 dhcp class class-name

Default

No DHCPv6 user classes exist.

Views

System view

Predefined user roles

network-admin

Parameters

class-name: Specifies a name for the DHCPv6 user class, a case-insensitive string of 1 to 63 characters.

Usage guidelines

In the DHCPv6 user class view, you can use the if-match command to configure match rules for user classification.

Examples

# Create a DHCPv6 user class test and enter DHCPv6 user class view.

<Sysname> system-view

[Sysname] ipv6 dhcp class test

[Sysname-dhcp6-class-test]

Related commands

class pool

ipv6 dhcp policy

if-match

ipv6 dhcp duid-mismatch offline

Use ipv6 dhcp duid-mismatch offline to allocate existing IPv6 address leases to DHCPv6 clients with different DUIDs.

Use undo ipv6 dhcp duid-mismatch offline to restore the default.

Syntax

ipv6 dhcp duid-mismatch offline

undo ipv6 dhcp duid-mismatch offline

Default

By default, upon receiving a request that contains the same MAC address as an existing lease but a different DUID, the DHCPv6 server reserves the lease and discards the request.

Views

System view

Predefined user roles

network-admin

Usage guidelines

A DHCPv6 client might have different DUIDs. One example is that a client runs on a host that installs multiple operating systems. When the client uses a different DUID to request an IPv6 address, the DHCPv6 server drops the request if the request contains the same MAC address as an existing lease. After you enable this feature, the DHCPv6 server releases the existing IPv6 address lease of the client and assigns the IPv6 address to the client.

This feature takes effect on a DHCPv6 client only if it connects to the network through the same interface and in the same VLAN.

Examples

# Configure the DHCPv6 server to allocate existing IPv6 address leases to DHCPv6 clients with different DUIDs.

<Sysname> system-view

[Sysname] ipv6 dhcp duid-mismatch offline

Related commands

ipv6 pool

display ipv6 dhcp server expired-ip

ipv6 dhcp option-group

Use ipv6 dhcp option-group to create a static DHCPv6 option group and enter its view.

Use undo ipv6 dhcp option-group to delete the specified static DHCPv6 option group.

Syntax

ipv6 dhcp option-group option-group-number

undo ipv6 dhcp option-group option-group-number

Default

No static DHCPv6 option groups exist.

Views

System view

Predefined user roles

network-admin

Parameters

option-group-number: Assigns an ID to the static option group, in the range of 1 to 100.

Usage guidelines

A static DHCPv6 option group can use the same ID as a dynamic DHCPv6 option group. If a static DHCPv6 option group and a dynamic DHCPv6 option group use the same ID, the static one takes precedence over the dynamic one.

Examples

# Create static DHCPv6 option group 1 and enter its view.

<Sysname> system-view

[Sysname] ipv6 dhcp option-group 1

[Sysname-dhcp6-option-group-1]

Related commands

display ipv6 dhcp option-group

ipv6 dhcp policy

Use ipv6 dhcp policy to create a DHCPv6 policy and enter its view, or enter the view of an existing DHCPv6 policy.

Use undo ipv6 dhcp policy to delete a DHCPv6 policy.

Syntax

ipv6 dhcp policy policy-name

undo ipv6 dhcp policy policy-name

Default

No DHCPv6 policies exist.

Views

System view

Predefined user roles

network-admin

Parameters

policy-name: Assigns a name to the DHCPv6 policy. The policy name is a case-insensitive string of 1 to 63 characters.

Usage guidelines

In DHCPv6 policy view, you can specify IPv6 address pools for different user classes. Clients matching a user class will obtain IPv6 addresses and other parameters from the specified address pool.

For a DHCPv6 policy to take effect, you must apply it to an interface.

Examples

# Create DHCPv6 policy test and enter its view.

<Sysname> system-view

[Sysname] ipv6 dhcp policy test

[Sysname-dhcp6-policy-test]

Related commands

class pool

default pool

ipv6 dhcp apply-policy

ipv6 dhcp class

ipv6 dhcp prefix-pool

Use ipv6 dhcp prefix-pool to create a prefix pool and specify the prefix and the assigned prefix length for the pool.

Use undo ipv6 dhcp prefix-pool to delete the specified prefix pool.

Syntax

ipv6 dhcp prefix-pool prefix-pool-number prefix { prefix-number | prefix/prefix-len } assign-len assign-len [ vpn-instance vpn-instance-name ]

undo ipv6 dhcp prefix-pool prefix-pool-number [ vpn-instance vpn-instance-name ]

Default

No prefix pools exist.

Views

System view

Predefined user roles

network-admin

Parameters

prefix-pool-number: Specifies a prefix pool number in the range of 1 to 128.

prefix { prefix-number | prefix/prefix-len }: Specifies a prefix by its ID or in the format of prefix/prefix length. The value range for the prefix-number argument is 1 to 1024. The value range for the prefix-len argument is 1 to 128.

assign-len assign-len: Specifies the assigned prefix length. The value range is 1 to 128, and the value must be greater than or equal to prefix-len. The difference between assign-len and prefix-len must be no more than 32.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. To create a prefix pool for the public network, do not specify this option.

Usage guidelines

Different prefix pools cannot overlap.

To modify a prefix pool, execute the undo ipv6 dhcp prefix-pool command to delete the prefix pool, and then execute the ipv6 dhcp prefix-pool command.

Deleting a prefix pool clears all prefix bindings from the prefix pool.

When you specify a prefix by its ID, follow these restrictions and guidelines:

· This command does not take effect if the prefix does not exist. This command takes effect after the prefix is created.

· Do not specify the same prefix for different prefix pools in a VPN.

· If the prefix that the ID represents is changed, the prefix range in the prefix pool accordingly changes.

Examples

# Create IPv6 prefix 88:99::/32 with the ID 3. Configure prefix pool 2 with IPv6 prefix 3 and assigned prefix length 42. Prefix pool 2 contains 1024 prefixes from 88:99::/42 to 88:99:FFC0::/42.

<Sysname> system-view

[Sysname] ipv6 prefix 3 88:99::/32

[Sysname] ipv6 dhcp prefix-pool 2 prefix 3 assign-len 42

# Create prefix pool 1, and specify the prefix 2001:0410::/32 with the assigned prefix length 42. Prefix pool 1 contains 1024 prefixes from 2001:0410::/42 to 2001:0410:FFC0::/42.

<Sysname> system-view

[Sysname] ipv6 dhcp prefix-pool 1 prefix 2001:0410::/32 assign-len 42

Related commands

display ipv6 dhcp prefix-pool

forbidden-prefix

prefix-pool

ipv6 dhcp route-log enable

Use ipv6 dhcp route-log enable to enable route logging for all IPv6 address pools.

Use undo ipv6 dhcp route-log enable to disable route logging for all IPv6 address pools.

Syntax

ipv6 dhcp route-log enable

undo ipv6 dhcp route-log enable

Default

Route logging is disabled for all IPv6 address pools.

Views

System view

Predefined user roles

network-admin

Usage guidelines

This feature enables the DHCPv6 server to generate log messages for route events that occur in IPv6 address pools. Route events include network route adding or deletion.

To enable route logging for IPv6 address pools, use one of the following commands:

· ipv6 dhcp route-log enable

This command enables route logging for all types of IPv6 address pools on the DHCPv6 server.

· route-log enable

This command enables route logging for a single IPv6 address pool on the DHCPv6 server. To enable route logging for only one IPv6 address pool, perform the following task:

a. Verify that route logging is disabled for all IPv6 address pools on the DHCPv6 server.

You can use the undo ipv6 dhcp route-log enable command to disable route logging for all IPv6 address pools.

b. Use the route-log enable command in the view of the target IPv6 address pool.

Enabling global route logging might cause a large number of unnecessary route log messages. To resolve this issue, use the undo route-log enable command to disable route logging for some IPv6 address pools.

Examples

# Enable route logging for all IPv6 address pools on the DHCPv6 server.

<Sysname> system-view

[Sysname] ipv6 dhcp route-log enable

Related commands

route-log enable

ipv6 dhcp server

Use ipv6 dhcp server to configure global address assignment on an interface. The server on the interface uses a global address pool to assign configuration information to a client.

Use undo ipv6 dhcp server to restore the default.

Syntax

ipv6 dhcp server { allow-hint | preference preference-value | rapid-commit } *

undo ipv6 dhcp server

Default

The server supports global address assignment, but does not support desired address/prefix assignment or rapid address/prefix assignment. The server preference is not set.

Views

Interface view

Predefined user roles

network-admin

Parameters

allow-hint: Enables desired address/prefix assignment.

preference preference-value: Specifies the server preference in Advertise messages, in the range of 0 to 255. A greater value represents a higher preference.

rapid-commit: Enables rapid address/prefix assignment involving two messages.

Usage guidelines

The allow-hint keyword enables the server to assign the desired address or prefix to the requesting client. If the desired address or prefix is not included in any global address pool, or is already assigned to another client, the server assigns the client a free address or a prefix. If the allow-hint keyword is not specified, the server ignores the desired address or prefix, and selects an address or prefix from a global address pool.

If you use the ipv6 dhcp server and ipv6 dhcp server apply pool commands on the same interface, the ipv6 dhcp server apply pool command takes effect.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure global address assignment on the interface Ten-GigabitEthernet 3/0/1. Use the desired address/prefix assignment and rapid address/prefix assignment, and set the server preference to the highest 255.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp server allow-hint preference 255 rapid-commit

Related commands

display ipv6 dhcp server

ipv6 dhcp select

ipv6 dhcp server apply pool

Use ipv6 dhcp server apply pool to apply an IPv6 address pool to an interface.

Use undo ipv6 dhcp server apply pool to restore the default.

Syntax

ipv6 dhcp server apply pool pool-name [ allow-hint | preference preference-value | rapid-commit ] *

undo ipv6 dhcp server apply pool

Default

No IPv6 address pool is applied to an interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

pool-name: Specifies an IPv6 address pool by its name, a case-insensitive string of 1 to 63 characters.

allow-hint: Enables desired address/prefix assignment.

preference preference-value: Specifies the server preference in Advertise messages, in the range of 0 to 255. A greater value represents a higher preference. By default, the server preference is not set.

rapid-commit: Enables rapid address/prefix assignment involving two messages.

Usage guidelines

Upon receiving a DHCPv6 request, the DHCPv6 server selects an IPv6 address or prefix from the address pool applied to the receiving interface. If no address pool is applied, the server selects an IPv6 address or prefix from a global address pool that matches the IPv6 address of the receiving interface or the DHCPv6 relay agent.

The allow-hint keyword enables the server to assign the desired address or prefix to the client. If the desired address or prefix does not exist or is already assigned to another client, the server assigns a free address or prefix. If allow-hint is not specified, the server ignores the desired address or prefix, and assigns a free address or prefix.

Only one address pool can be applied to an interface. If you execute this command multiple times, the most recent configuration takes effect.

A non-existing address pool can be applied to an interface, but the server cannot assign any prefix, address, or other configuration information from the address pool until the address pool is created.

Examples

# Apply address pool 1 to Ten-GigabitEthernet 3/0/1, configure the address pool to support desired address/prefix assignment and address/prefix rapid assignment, and set the preference to 255.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp server apply pool 1 allow-hint preference 255 rapid-commit

Related commands

display ipv6 dhcp server

ipv6 pool

ipv6 dhcp select

ipv6 dhcp server database filename

Use ipv6 dhcp server database filename to configure the DHCPv6 server to back up the DHCPv6 bindings to a file.

Use undo ipv6 dhcp server database filename to restore the default.

Syntax

ipv6 dhcp server database filename { filename | url url [ username username [ password { cipher | simple } string ] ] }

undo ipv6 dhcp server database filename

Default

The DHCPv6 server does not back up the DHCPv6 bindings.

Views

System view

Predefined user roles

network-admin

Parameters

filename: Specifies the name of a local backup file, a case-insensitive string of 1 to 255 characters. For information about the filename argument, see Fundamentals Configuration Guide.

url url: Specifies the URL of a remote backup file. The URL is a case-sensitive string of 1 to 255 characters. Do not include a username or password in the URL.

username username: Specifies the username for accessing the URL of the remote backup file, a case-sensitive string of 1 to 32 characters. Do not specify this option if a username is not required for accessing the URL of the remote backup file.

cipher: Specifies a password in encrypted form.

simple: Specifies a password in plaintext form. For security purposes, the password specified in plaintext form will be stored in encrypted form.

string: Specifies the password. Its plaintext form is a case-sensitive string of 1 to 32 characters. Its encrypted form is a case-sensitive string of 1 to 73 characters. Do not specify this argument if a password is not required for accessing the URL of the remote backup file.

Usage guidelines

The command automatically creates the file if you specify a nonexistent file.

With this command executed, the DHCPv6 server backs up its bindings immediately and runs auto backup. The server, by default, waits 300 seconds after a binding change to update the backup file. You can use the ipv6 dhcp server database update interval command to change the waiting time. If no DHCPv6 binding changes, the backup file is not updated.

As a best practice, back up the bindings to a remote file. If you use the local storage medium, the frequent erasing and writing might damage the medium and then cause the DHCPv6 server to malfunction.

When the backup file is on a remote device, follow these restrictions and guidelines to specify the URL, username, and password:

· If the file is on an FTP server, enter URL in the format of ftp://server address:port/file path, where the port number is optional.

· If the file is on a TFTP server, enter URL in the format of tftp://server address:port/file path, where the port number is optional.

· The username and password must be the same as those configured on the FTP server. If the server authenticates only the username, the password can be omitted.

· If the IP address of the server is an IPv6 address, enclose the address in a pair of brackets, for example, ftp://[1::1]/database.dhcp.

· You can also specify the DNS domain name for the server address field, for example, ftp://company/database.dhcp.

Examples

# Configure the DHCPv6 server to back up its bindings to the file database.dhcp

<Sysname> system-view

[Sysname] ipv6 dhcp server database filename database.dhcp

# Configure the DHCPv6 server to back up its bindings to the file database.dhcp in the working directory of the FTP server at 10::1.

<Sysname> system-view

[Sysname] ipv6 dhcp server database filename url ftp://[10::1]/database.dhcp username 1 password simple 1

Related commands

ipv6 dhcp server database update interval

ipv6 dhcp server database update now

ipv6 dhcp server database update stop

ipv6 dhcp server database update interval

Use ipv6 dhcp server database update interval to set the waiting time for the DHCPv6 server to update the backup file after a DHCPv6 binding change.

Use undo ipv6 dhcp server database update interval to restore the default.

Syntax

ipv6 dhcp server database update interval interval

undo ipv6 dhcp server database update interval

Default

The DHCPv6 server waits 300 seconds to update the backup file after a DHCPv6 binding change. If no DHCPv6 binding changes, the backup file is not updated.

Views

System view

Predefined user roles

network-admin

Parameters

interval: Sets the waiting time in the range of 60 to 864000 seconds.

Usage guidelines

When a DHCPv6 binding is created, updated, or removed, the waiting period starts. The DHCPv6 server updates the backup file when the waiting period is reached. All bindings changed during the period will be saved to the backup file.

The waiting time takes effect only after you configure the DHCPv6 binding auto backup by using the ipv6 dhcp server database filename command.

Examples

# Set the waiting time to 600 seconds for the DHCPv6 server to update the backup file.

<Sysname> system-view

[Sysname] ipv6 dhcp server database update interval 600

Related commands

ipv6 dhcp server database filename

ipv6 dhcp server database update now

ipv6 dhcp server database update stop

ipv6 dhcp server database update now

Use ipv6 dhcp server database update now to manually save the DHCPv6 bindings to the backup file.

Syntax

ipv6 dhcp server database update now

Views

System view

Predefined user roles

network-admin

Usage guidelines

Each time this command is executed, the DHCPv6 bindings are saved to the backup file.

For this command to take effect, you must configure the DHCPv6 auto backup by using the ipv6 dhcp server database filename command.

Examples

# Manually save the DHCPv6 bindings to the backup file.

<Sysname> system-view

[Sysname] ipv6 dhcp server database update now

Related commands

ipv6 dhcp server database filename

ipv6 dhcp server database update interval

ipv6 dhcp server database update stop

Use ipv6 dhcp server database update stop to terminate the download of DHCPv6 bindings from the backup file.

Syntax

ipv6 dhcp server database update stop

Views

System view

Predefined user roles

network-admin

Usage guidelines

The DHCPv6 server does not provide services during the binding download process. If the connection breaks up during the process, the waiting timeout timer is 60 minutes. When the timer expires, the DHCPv6 server stops waiting and starts providing address allocation services. You can execute this command to terminate the download immediately.

Manual termination allows the DHCPv6 server to provide services without waiting for the connection to be repaired. The IPv6 addresses and prefixes associated with the undownloaded bindings will be assigned to clients and address conflicts might occur.

Examples

# Terminate the download of the backup DHCPv6 bindings.

<Sysname> system-view

[Sysname] ipv6 dhcp server database update stop

Related commands

ipv6 dhcp server database filename

ipv6 dhcp server database update interval

ipv6 dhcp server database update now

ipv6 dhcp server forbidden-address

Use ipv6 dhcp server forbidden-address to exclude IPv6 addresses from DHCP allocation globally.

Use undo ipv6 dhcp server forbidden-address to remove the configuration.

Syntax

ipv6 dhcp server forbidden-address start-ipv6-address [ end-ipv6-address ] [ vpn-instance vpn-instance-name ]

undo ipv6 dhcp server forbidden-address start-ipv6-address [ end-ipv6-address ] [ vpn-instance vpn-instance-name ]

Default

Except for the DHCPv6 server address, all IPv6 addresses in an IPv6 address pool are assignable.

Views

System view

Predefined user roles

network-admin

Parameters

start-ipv6-address: Specifies the start IPv6 address.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If the excluded IPv6 addresses belong to the public network, do not specify this option.

Usage guidelines

The IPv6 addresses of some devices such as the gateway and FTP server cannot be assigned to clients. Use this command to exclude such addresses from DHCP allocation.

You cannot exclude an IPv6 address from DHCP allocation if it has been specified in a static DHCP binding by using the static-bind command.

The address range specified in the undo form of the command must be the same as the address range specified in the command. To remove an IP address that has been specified as part of an address range, you must remove the entire address range.

You can execute this command multiple times to exclude multiple IPv6 address ranges from DHCP allocation.

Examples

# Exclude IPv6 addresses of 2001:10:110::1 through 2001:10:110::20 from DHCP allocation.

<Sysname> system-view

[Sysname] ipv6 dhcp server forbidden-address 2001:10:110::1 2001:10:110::20

Related commands

ipv6 dhcp server forbidden-prefix

static-bind

ipv6 dhcp server forbidden-prefix

Use ipv6 dhcp server forbidden-prefix to exclude IPv6 prefixes from DHCP allocation globally.

Use undo ipv6 dhcp server forbidden-prefix to remove the configuration.

Syntax

ipv6 dhcp server forbidden-prefix start-prefix/prefix-len [ end-prefix/prefix-len ] [ vpn-instance vpn-instance-name ]

undo ipv6 dhcp server forbidden-prefix start-prefix/prefix-len [ end-prefix/prefix-len ] [ vpn-instance vpn-instance-name ]

Default

No IPv6 prefixes are excluded from DHCP allocation globally.

Views

System view

Predefined user roles

network-admin

Parameters

start-prefix/prefix-len: Specifies the start IPv6 prefix. The prefix-len argument specifies the prefix length in the range of 1 to 128.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If the excluded IPv6 prefixes belong to the public network, do not specify this option.

Usage guidelines

You cannot exclude an IPv6 prefix from DHCP allocation if it has been specified in a static binding by using the static-bind command.

The prefix range specified in the undo form of the command must be the same as the prefix range specified in the command. To remove a prefix that has been specified as part of a prefix range, you must remove the entire prefix range.

You can execute this command multiple times to exclude multiple IPv6 prefix ranges from DHCP allocation.

Examples

# Exclude IPv6 prefixes from 2001:3e11::/32 through 2001:3eff::/32 from DHCP allocation.

<Sysname> system-view

[Sysname] ipv6 dhcp server forbidden-prefix 2001:3e11::/32 2001:3eff::/32

Related commands

ipv6 dhcp server forbidden-address

static-bind

ipv6 dhcp server multi-ip per-mac enable

Use ipv6 dhcp server multi-ip per-mac enable to enable allocation of different IP addresses to DHCPv6 clients with the same MAC address.

Use undo ipv6 dhcp server multi-ip per-mac enable to disable allocation of different IP addresses to DHCPv6 clients with the same MAC address.

Syntax

ipv6 dhcp server multi-ip per-mac enable

undo ipv6 dhcp server multi-ip per-mac enable

Default

This feature is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

If the DHCPv6 server has assigned IP addresses to DHCPv6 clients, you cannot enable or disable this feature. If you do so, the system displays an error message.

Examples

# Enable different IP address allocation for DHCPv6 clients with the same MAC address.

<Sysname> system-view

[Sysname] ipv6 dhcp server multi-ip per-mac enable

ipv6 pool

Use ipv6 pool to create an IPv6 address pool and enter its view, or enter the view of an existing IPv6 address pool.

Use undo ipv6 pool to delete the specified IPv6 address pool.

Syntax

ipv6 pool pool-name

undo ipv6 pool pool-name

Default

No IPv6 address pools exist.

Views

System view

Predefined user roles

network-admin

Parameters

pool-name: Specifies a name for the IPv6 address pool, a case-insensitive string of 1 to 63 characters.

Usage guidelines

When you delete an IPv6 address pool, binding information for the assigned IPv6 addresses and prefixes in the address pool is also deleted.

Examples

# Create an IPv6 address pool and enter its view.

<Sysname> system-view

[Sysname] ipv6 pool p1

[Sysname-ipv6-pool-p1]

Related commands

display ipv6 pool

ipv6 pool-group

Use ipv6 pool-group to create an IPv6 address pool group and enter its view, or enter the view of an existing IPv6 address pool group.

Use undo ipv6 pool-group to delete the specified IPv6 address pool group.

Syntax

ipv6 pool-group pool-group-name

undo ipv6 pool-group pool-group-name

Default

No IPv6 address pool groups exist.

Views

System view

Predefined user roles

network-admin

Parameters

pool-group-name: Specifies an IPv6 address pool group name, a case-insensitive string of 1 to 63 characters.

Usage guidelines

For a user that matches an IPv6 address pool group, the DHCPv6 server selects an IPv6 address from an available IPv6 address pool in the IPv6 address pool group.

If both an IPv6 address pool and an IPv6 address pool group exist in AAA authorized user attributes, authenticated users can only obtain IPv6 addresses from the IPv6 address pool. The users cannot obtain IPv6 addresses from the IPv6 address pool group even if the authorized IPv6 address pool has no assignable IPv6 addresses.

If a DHCPv6 client matches a remote IPv6 pool in an IPv6 pool group, the relay agent cannot determine whether the DHCPv6 server in the remote IPv6 pool has assignable IPv6 addresses. To resolve this issue, perform the following tasks for the remote IPv6 pool:

· Execute the network command to specify the IPv6 address resources configured on the remote DHCPv6 server.

· Execute the ipv6 dhcp server forbidden-address command to specify the excluded IPv6 addresses configured on the remote DHCPv6 server.

Upon receiving an IPv6 address from the remote DHCPv6 server, the relay agent considers that IPv6 address as assigned in the remote IPv6 pool. This mechanism ensures that the relay agent and the DHCPv6 server have the same free address information. The relay agent can then determine whether the DHCPv6 server has free addresses by examining free addresses in the remote IPv6 pool.

Examples

# Create an IPv6 address pool group named poolgroup1 and enter its view.

<Sysname> system-view

[Sysname] ipv6 pool-group poolgroup1

[Sysname-ipv6-pool-group-poolgroup1]

Related commands

display ipv6 pool-group

ipv6-pool algorithm round-robin

Use ipv6-pool algorithm round-robin to enable round-robin IPv6 pool selection in an IPv6 pool group for address allocation.

Use undo ipv6-pool algorithm round-robin to restore the default.

Syntax

ipv6-pool algorithm round-robin { local | remote } *

undo ipv6-pool algorithm round-robin { local | remote} *

Default

The DHCPv6 server moves from one IPv6 pool to the next only when that IPv6 pool does not have assignable IPv6 addresses or prefixes.

Views

IPv6 address pool group view

Predefined user roles

network-admin

Parameters

local: Selects local IPv6 pools for address allocation in a round-robin manner.

remote: Selects remote IPv6 pools for address allocation in a round-robin manner.

Usage guidelines

The default pool selection mechanism leads to uneven IPv6 resource distribution among IPv6 pools. To balance resource usage across the IPv6 pools in a pool group, enable the round-robin algorithm on that pool group.

The round-robin IPv6 pool selection mechanism operates as follows:

1. On receipt of the first DHCPv6 request, the server selects the first available IPv6 pool for address allocation from the pool group.

2. When a new DHCPv6 request arrives, the server selects the next available IPv6 pool for address allocation.

3. After the server iterates through all the IPv6 pool in the group, the server starts over again from the first IPv6 pool.

When you use this command, follow these guidelines:

· If you specify only the local keyword, this command will take effect only on local IPv6 pools.

· If you specify only the remote keyword, this command will take effect only on remote IPv6 pools.

· If you specify both the local and remote keywords, the server will first select local IPv6 pools in a round-robin manner. It moves to remote IPv6 pools for round-robin selection only if none of the local IP pools has assignable IPv6 addresses or prefixes.

Examples

# Enable round-robin selection of local IPv6 pools in IPv6 pool group 1.

<Sysname> system-view

[Sysname] ipv6 pool-group 1

[Sysname-dhcp6-pool-group-1] ipv6-pool algorithm round-robin local

ipv6 unr

Use ipv6 unr to set an IPv6 user network route (UNR) tag.

Use undo ipv6 unr to restore the default.

Syntax

ipv6 unr { framed-ipv6-address-tag tag-value | framed-ipv6-prefix-tag tag-value | framed-ipv6-route-tag tag-value | local-pool-tag tag-value | remote-pool-tag tag-value } *

undo ipv6 unr { framed-ipv6-address-tag | framed-ipv6-prefix-tag | framed-ipv6-route-tag | local-pool-tag | remote-pool-tag } *

Default

No IPv4 UNR tag value.

Views

System view

Predefined user roles

network-admin

Parameters

framed-ipv6-address-tag tag-value: Sets a tag value for network routes that are generated based on the Framed-IPv6-Address attribute assigned by the RADIUS server. The tag value range is 1 to 4294967295.

framed-ipv6-prefix-tag tag-value: Sets a tag value for network routes that are generated based on the Framed-IPv6-Prefix attribute assigned by the RADIUS server. The tag value range is 1 to 4294967295.

framed-ipv6-route-tag tag-value: Sets a tag value for network routes that are generated based on the Framed-IPv6-Route attribute assigned by the RADIUS server. The tag value range is 1 to 4294967295.

local-pool-tag tag-value: Sets a UNR tag value for common IPv6 address pools. The tag value range is 1 to 4294967295.

remote-pool-tag tag-value: Sets a UNR tag value for DHCPv6 relay address pools. The tag value range is 1 to 4294967295.

Usage guidelines

When the DHCPv6 server assigns an IPv6 address, it adds the route for the IPv6 address to the route management module. In a BAS network, you can classify user network routes based on their UNR tag values for route redistribution.

The tag value modification does not affect the tag value for network routes that have been advertised.

You can set a tag value in system view or in IPv6 address pool view. For BAS access users, the value set in IPv6 address pool view has higher priority than the one set in system view.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the UNR tag value to 1 for network routes that are generated based on the Framed-IPv6-Address attribute assigned by the RADIUS server.

<Sysname> system-view

[Sysname] ipv6 unr framed-ipv6-address-tag 1

lock

Use lock to lock an IPv6 pool.

Use undo lock to restore the default.

Syntax

lock [ strict ]

undo lock

Default

IPv6 pools are not locked.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

strict: Locks the IPv6 pool in strict mode. If an IPv6 pool is locked in strict mode, the server does not respond to the lease renewal requests from online DHCPv6 clients for IPv6 addresses and prefixes in the pool or assign IPv6 addresses or prefixes from the pool to new DHCPv6 clients. If you do not specify this keyword, the IPv6 pool is locked in loose mode. When the IPv6 pool is locked in loose mode, the server responds to the lease renewal requests from online DHCPv6 clients for IPv6 addresses and prefixes in the pool. However, it does not assign IPv6 addresses or prefixes from the pool to new DHCPv6 clients.

Usage guidelines

Lock an IPv6 pool in loose mode or strict mode depending on the IPv6 pool management requirements.

· Lock an IPv6 pool in loose mode if you are using that pool only to assign addresses or prefixes to existing DHCPv6 clients on the network.

· Lock an IPv6 pool in strict mode if you are deleting or changing the IPv6 address space or prefix space assigned to the IPv6 pool. You can delete or change the IPv6 address space or prefix space for an IP pool only when the IPv6 pool does not contain assigned IPv6 addresses or prefixes. Locking the IPv6 pool in strict mode ensures that you can perform the delete or change operation as soon as all assigned IPv6 addresses and prefixes in the pool are reclaimed.

Examples:

# Lock IPv6 pool 1 in loose mode.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] lock

The IPv6 pool will answer only renewal requests of online users but will not assign addresses or prefixes to new users. Continue? [Y/N]:

# Lock IPv6 pool 1 in strict mode.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] lock strict

The IPv6 pool will not answer renewal requests of online users or assign addresses or prefixes to new users. Continue? [Y/N]:

Related commands

display ipv6 pool

network

Use network to specify an IPv6 subnet for dynamic allocation in an IPv6 address pool.

Use undo network to restore the default.

Syntax

network { prefix/prefix-length | prefix prefix-number [ sub-prefix/sub-prefix-length ] } [ preferred-lifetime preferred-lifetime valid-lifetime valid-lifetime ] [ export-route [ preference preference | tag tag ] * ]

undo network

Default

No IPv6 subnet is specified in an IPv6 address pool.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

prefix/prefix-length: Specifies the IPv6 subnet for dynamic allocation. The value range for the prefix-length argument is 1 to 128.

prefix prefix-number: Specifies an IPv6 prefix by its ID in the range of 1 to 1024.

sub-prefix/sub-prefix-length: Specifies an IPv6 sub-prefix and its length. The value range for the sub-prefix-length argument is 1 to 128. If the IPv6 prefix is longer than the IPv6 sub-prefix or if you do not specify an IPv6 sub-prefix, the IPv6 subnet defined by the IPv6 prefix is used for dynamic allocation.

preferred-lifetime preferred-lifetime: Sets the preferred lifetime. The value range is 60 to 4294967295 seconds, and the default is 604800 seconds (7 days).

valid-lifetime valid-lifetime: Sets the valid lifetime. The value range is 60 to 4294967295 seconds, and the default is 2592000 seconds (30 days). The valid lifetime must be longer than or equal to the preferred lifetime.

export-route: Advertises the subnet assigned to DHCPv6 clients. If you do not specify this keyword, the subnet will not be advertised.

preference preference: Sets a preference for the network route to be advertised, in the range of 1 to 255. The default preference is 70.

tag tag: Sets a tag value for the network route to be advertised, in the range of 0 to 4294967295. The default tag value is 0. Tags are route identifications for routing policies to filter routes. For more information about routing policies, see Layer 3—IP Routing Configuration Guide.

Usage guidelines

You can specify only one subnet for an IPv6 address pool. If you execute the network command multiple times, the most recent configuration takes effect.

If the IPv6 address pool has assigned IPv6 addresses, you cannot use the network command to modify or remove the subnet in the address pool.

You can specify a nonexistent IPv6 prefix in this command, but this command takes effect after you create the prefix.

If you execute the network export-route command multiple times, the most recent configuration takes effect.

The following information is about the use of the network prefix command:

· The network prefix command does not take effect if the specified IPv6 prefix does not exist. This command takes effect after the IPv6 prefix is created by using either of the following methods:

¡ Execute the ipv6 dhcp client pd command on the DHCPv6 server to request the prefix from another DHCPv6 server. In this case, the requesting server acts as a DHCPv6 client.

¡ Use the ipv6 prefix command to create the prefix manually.

· If you specify the sub-prefix/sub-prefix-length arguments, the assignable prefix range is the prefix set that overlaps between the specified prefix and sub-prefix.

· If the specified prefix changes, the IPv6 subnet generated by using this command automatically changes. Upon this change, the device automatically removes the assigned prefix and address bindings.

You can assign overlapping subnets to IPv6 address pools. However, you cannot assign the same subnet to different IPv6 address pools.

Examples

# Specify the subnet 3ffe:501:ffff:100::/64 in IPv6 address pool 1.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] network 3ffe:501:ffff:100::/64

# Create IPv6 prefix 88:99::/32 with the prefix ID 3. Create IPv6 address pool 1 and use the IPv6 subnet defined by the IPv6 prefix for dynamic allocation.

<Sysname> system-view

[Sysname] ipv6 prefix 3 88:99::/32

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] network prefix 3

# Create IPv6 prefix 88:99::/32 with the prefix ID 3. Create IPv6 address pool 1 and use IPv6 subnet 88:99:ffff:100::/64 defined by IPv6 prefix 3 and IPv6 sub-prefix 3ffe:501:ffff:100::/64 for dynamic allocation. The first 32 bits of the IPv6 subnet are determined by IPv6 prefix 3. The bits 33 to 64 of the IPv6 subnet are determined by the IPv6 sub-prefix and its length. The prefix length of the IPv6 subnet is the IPv6 sub-prefix length.

<Sysname> system-view

[Sysname] ipv6 prefix 3 88:99::/32

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] network prefix 3 3ffe:501:ffff:100::/64

Related commands

address range

display ipv6 pool

forbidden-address

temporary address range

option

Use option to configure a self-defined DHCPv6 option in an IPv6 address pool.

Use undo option to remove a self-defined DHCPv6 option from an IPv6 address pool.

Syntax

option code hex hex-string

undo option code

Default

No self-defined DHCPv6 option is configured in an IPv6 address pool.

Views

IPv6 address pool view

DHCPv6 option group view

Predefined user roles

network-admin

Parameters

code: Specifies a number for the self-defined option, in the range of 21 to 65535, excluding 25 through 26, 37 through 40, and 43 through 48.

hex hex-string: Specifies the content of the option, a hexadecimal number whose length is an even number in the range of 2 to 256.

Usage guidelines

The DHCPv6 server fills the self-defined option with the specified hexadecimal number and sends it in a response to the client.

You can self-define options for the following purposes:

· Add newly released options.

· Add options for which the vendor defines the contents, for example, Option 43.

· Add options for which the CLI does not provide a dedicated configuration command like dns-server. For example, you can use the option 31 hex 02000000000000000000000000000001 command to define the NTP server address 200::1 for DHCPv6 clients.

If a DHCPv6 option is specified by both the dedicated command and the option command, the DHCPv6 server preferentially assigns the content specified by the dedicated command. For example, if a DNS server address is specified by the dns-server command and the option 23 command, the server uses the address specified by dns-server command.

If you execute this command multiple times with the same code specified, the most recent configuration takes effect.

Examples

# Configure Option 23 that specifies a DNS server address 2001:f3e0::1 in IPv6 address pool 1.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] option 23 hex 2001f3e0000000000000000000000001

Related commands

display ipv6 pool

dns-server

domain-name

sip-server

option-group

Use option-group to specify a DHCPv6 option group for an IPv6 address pool.

Use undo option-group to restore the default.

Syntax

option-group option-group-number

undo option-group

Default

No DHCPv6 option group is specified for an IPv6 address pool.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

option-group--number: Specifies a DHCPv6 option group by its number in the range of 1 to 100.

Examples

# Specify DHCPv6 option group 1 for IPv6 address pool 1.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] option-group 1

Related commands

display ipv6 pool

ipv6 dhcp option-group

pd-in-use threshold

Use pd-in-use threshold to set t he prefix usage threshold for an IPv6 address pool.

Use undo pd-in-use threshold to restore the default.

Syntax

pd-in-use threshold threshold-value

undo pd-in-use threshold

Default

The prefix usage threshold for an IPv6 address pool is 100%.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

threshold-value: Specifies a prefix usage threshold, in percentage. The value range for this argument is 0 to 100.

Usage guidelines

The messages generated by the DHCPv6 module varies by threshold as follows:

· If you set the prefix usage threshold to 100%, the DHCPv6 module will send a message to the SNMP module when one of the following events occurs:

¡ The prefix usage of the IPv6 pool reaches 100%.

¡ The prefix usage of the IPv6 pool drops below 90% after a threshold violation.

· If you set the prefix usage threshold to a value less than 100%, the DHCPv6 module sends a message to the SNMP module and a log message to the information center when one of the following events occurs:

¡ The prefix usage of the IPv6 pool reaches or exceeds the threshold.

¡ The prefix usage of the IPv6 pool drops below 90% of the threshold after a threshold violation.

· If you set the prefix usage threshold to 0, the DHCPv6 module will not generate any SNMP notification or log message for a threshold crossing event.

To enable the DHCPv6 module to send SNMP notifications, use the snmp-agent trap enable ipv6 dhcp server command to configure the DHCPv6 module.

For DHCP notifications to be sent correctly, you must configure the SNMP module on the device. For more information about configuring the SNMP module, see Network Management and Monitoring Configuration Guide.

Examples

# Set the prefix usage threshold to 75% for IPv6 address pool pool1.

<Sysname> system-view

[Sysname] ipv6 pool pool1

[Sysname-ipv6-pool-pool1] pd-in-use threshold 75

Related commands

display ipv6 pool

snmp-agent trap enable ipv6 dhcp server

pool

Use pool to add an IPv6 address pool to the IPv6 address pool group.

Use undo pool to remove an IPv6 address pool from the IPv6 address pool group.

Syntax

pool pool-name [ priority priority-value ]

undo pool [ pool-name ]

Default

No IPv6 address pools exist in an IPv6 address pool group.

Views

IPv6 address pool group view

Predefined user roles

network-admin

Parameters

pool-name: Specifies an IPv6 address pool name, a case-insensitive string of 1 to 63 characters. The undo pool command removes all IPv6 address pools from the IPv6 address pool group if you do not specify this argument.

priority priority-value: Specifies the priority of the IPv6 address pool. The value range is 0 to 65535, and the default value is 0. A smaller value represents a higher priority.

Usage guidelines

For a user that matches an IPv6 address pool group, the DHCPv6 server selects an IPv6 address from an available IPv6 address pool in the IPv6 address pool group according to the descending order of the IPv6 address pool priority. If multiple IPv6 address pools share the same priority, the server selects the pool displayed first in the output from the display ipv6 pool-group command.

An IPv6 address pool supports a maximum of 1024 IPv6 address pools. An IPv6 address pool can be added to multiple address pool groups.

Before you add an IPv6 address pool to an address pool group, make sure the IPv6 address pool is on the public network or in the same VPN instance as the address pool group.

Before you remove an IPv6 address pool from an IPv6 address pool group, make sure the IPv6 address pool has not assigned any IPv6 addresses.

Examples

# Create an IPv6 address pool named poolgroup1, and assign IPv6 address pool pool1 to the address pool group.

<Sysname> system-view

[Sysname] ipv6 pool-group poolgroup1

[Sysname-ipv6-pool-group-poolgroup1] pool pool1

Related commands

ipv6 pool-group

prefix-pool

Use prefix-pool to apply a prefix pool to an IPv6 address pool, so the DHCPv6 server can dynamically select a prefix from the prefix pool for a client.

Use undo prefix-pool to remove the prefix pool.

Syntax

prefix-pool prefix-pool-number [ preferred-lifetime preferred-lifetime valid-lifetime valid-lifetime ] [ export-route [ preference preference | tag tag ] * ]

undo prefix-pool prefix-pool-number

Default

No prefix pool is applied to an IPv6 address pool.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

prefix-pool-number: Specifies a prefix pool by its number in the range of 1 to 128.

preferred-lifetime preferred-lifetime: Sets the preferred lifetime in the range of 60 to 4294967295 seconds. The default value is 604800 seconds (7 days).

valid-lifetime valid-lifetime: Sets the valid lifetime in the range of 60 to 4294967295 seconds. The default value is 2592000 seconds (30 days). The valid lifetime must be longer than or equal to the preferred lifetime.

export-route: Advertises prefixes assigned to DHCPv6 clients. If you do not specify this keyword, the prefixes will not be advertised.

preference preference: Sets a route preference, in the range of 1 to 255. The default preference is 70.

tag tag: Sets a tag value in the range of 0 to 4294967295. The default tag value is 0. Tags are route identifications for routing policies to filter routes. For more information about routing policies, see Layer 3—IP Routing Configuration Guide.

Usage guidelines

Only one prefix pool can be applied to an address pool.

You can apply a prefix pool that has not been created to an address pool. The setting takes effect after the prefix pool is created.

To modify the prefix pool in an IPv6 address pool, execute the undo prefix-pool command to remove the prefix pool, and then execute the prefix-pool command.

If you configure only the ipv6 dhcp advertise pd-route command without configuring the prefix advertisement, the DHCPv6 server advertises only prefixes matching the assign-len assign-len argument.

If you have configured the prefix advertisement, the routes of the advertised prefixes matching the assign-len assign-len argument carry the default route preference and tag value and cannot be redistributed to other routing protocols. The route of advertised original prefix that match the prefix-number or prefix/prefix-len argument in the prefix pool carries the configured route preference and tag value.

The preference preference and tag tag options take effect only on the prefix routes that are assigned after you execute this command.

If you specify the export-route keyword in both the prefix-pool and network commands, make sure the prefix in the network command is different from the prefix in the prefix pool. Otherwise, the advertised prefix route will be the same as the advertised address route, and users will become unreachable.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Apply prefix pool 1 to address pool 1, and use the default preferred lifetime and valid lifetime.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] prefix-pool 1

# Apply prefix pool 2 to address pool 2, and set the preferred lifetime to one day and the valid lifetime to three days.

<Sysname> system-view

[Sysname] ipv6 pool 2

[Sysname-ipv6-pool-2] prefix-pool 2 preferred-lifetime 86400 valid-lifetime 259200

Related commands

display ipv6 pool

forbidden-prefix

ipv6 dhcp prefix-pool

reserve expired-ipv6-address enable

Use reserve expired-ipv6-address enable to enable IPv6 address reservation in an IPv6 address pool.

Use undo reserve expired-ipv6-address enable to disable IPv6 address reservation in an IPv6 address pool.

Syntax

reserve expired-ipv6-address enable

undo reserve expired-ipv6-address enable

Default

IPv6 address reservation is enabled.

Views

IPv6 address pool view

Predefined user roles

network-admin

Usage guidelines

This feature enables the DHCPv6 server to reserve IPv6 addresses for clients that are going offline. When a client goes offline, the DHCPv6 server reserves the client IPv6 address as an expired lease. When the client comes online again, the DHCPv6 server assigns the IPv6 address in the reserved lease to the client.

Disable the IPv6 address reservation feature if you want the DHCPv6 server to reclaim IPv6 addresses immediately after clients go offline.

Examples

# Disable IPv6 address reservation in IPv6 address pool 0.

<Sysname> system-view

[Sysname] ipv6 pool 0

[Sysname-ipv6-pool-0] undo reserve expired-ipv6-address enable

Related commands

display ipv6 dhcp server expired-ip

reserve expired-ipv6-address mode

Use reserve expired-ipv6-address mode to configure the IPv6 address reservation mode in an IPv6 address pool.

Use undo reserve expired-ipv6-address mode to restore the default.

Syntax

reserve expired-ipv6-address mode { duid | mac } [ limit limit-number | time time ] *

undo reserve expired-ipv6-address mode

Default

With IPv6 address reservation enabled, a DHCPv6 server reserves IPv6 addresses based on DUIDs.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

duid: Reserves IPv6 addresses based on DUIDs.

mac: Reserves IPv6 addresses based on client MAC addresses.

limit limit-number: Specifies the maximum number of IPv6 addresses that can be reserved in an IPv6 address pool. The value range is 1 to 256000, and the default value is 256000.

time time: Specifies the reservation time for expired IPv6 addresses, in the range of 60 to 4294967295 seconds. If you do not specify this option, the reserved time is unlimited (about 136 years defined by the system).

Usage guidelines

With IPv6 address reservation enabled, the DHCPv6 server reserves IPv6 addresses for DHCP clients in the following modes:

· Reservation based on DUIDs—The DHCPv6 server records the IP-to-DUID bindings for online clients. When these clients come online again, the server assigns them the IPv6 addresses in the bindings based on their DUIDs.

· Reservation based on client MAC addresses—The DHCPv6 server records the IP-to-MAC bindings for online clients. When these clients come online again, the server assigns them the IPv6 addresses in the bindings based on their MAC addresses.

L2TP users do not support address reservation based on client MAC addresses.

When you change the IPv6 address reservation mode, the device deletes all expired IPv6 address leases that are saved in the old reservation mode.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure the DHCPv6 server to reserve IPv6 addresses based on DUIDs in IPv6 address pool 0.

<Sysname> system-view

[Sysname] ipv6 pool 0

[Sysname-ipv6-pool-0] reserve expired-ipv6-address enable

[Sysname-ipv6-pool-0] reserve expired-ipv6-address mode duid

Related commands

display ipv6 dhcp server expired-ip

reserve expired-pd enable

Use reserve expired-pd enable to enable IPv6 prefix reservation in an IPv6 address pool.

Use undo reserve expired-pd enable to disable IPv6 prefix reservation in an IPv6 address pool.

Syntax

reserve expired-pd enable

undo reserve expired-pd enable

Default

IPv6 prefix reservation is enabled.

Views

IPv6 address pool view

Predefined user roles

network-admin

Usage guidelines

This feature enables the DHCPv6 server to reserve IPv6 prefixes for clients that are going offline. When a client goes offline, the DHCPv6 server reserves the client IPv6 prefix as an expired lease. When the client comes online again, the DHCPv6 server assigns the IP prefix in the reserved lease to the client.

Disable the IPv6 prefix reservation feature if you want the DHCPv6 server to reclaim IPv6 prefix immediately after clients go offline.

Examples

# Disable IPv6 prefix reservation in IPv6 address pool 0.

<Sysname> system-view

[Sysname] ipv6 pool 0

[Sysname-ipv6-pool-0] reserve expired-pd enable

Related commands

display ipv6 dhcp server expired-pd

reserve expired-pd mode

Use reserve expired-pd mode to configure the IPv6 prefix reservation mode in an IPv6 address pool.

Use undo reserve expired-pd mode to restore the default.

Syntax

reserve expired-pd mode { duid | mac } [ limit limit-number | time time ] *

undo reserve expired-pd mode

Default

With IPv6 prefix reservation enabled, a DHCPv6 server reserves IPv6 prefixes based on DUIDs.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

duid: Reserves IPv6 prefixes based on DUIDs.

mac: Reserves IPv6 prefixes based on client MAC addresses.

limit limit-number: Specifies the maximum number of IPv6 addresses that can be reserved in an IPv6 address pool. The value range is 1 to 256000, and the default value is 256000.

Usage guidelines

With IPv6 prefix reservation enabled, the DHCPv6 server reserves IPv6 prefixes for DHCPv6 clients in the following modes:

· Reservation based on client DUIDs—The DHCPv6 server records the IPv6 prefix-to-DUID bindings for online clients. When these clients come online again, the server assigns them the IPv6 prefixes in the bindings based on their DUIDs.

· Reservation based on client MAC addresses—The DHCPv6 server records the IPv6 prefix-to-MAC bindings for online clients. When these clients come online again, the server assigns them the IPv6 prefixes in the bindings based on their MAC addresses.

L2TP users do not support prefix reservation based on client MAC addresses.

When you change the IPv6 prefix reservation mode, the device deletes all expired IPv6 prefix leases that are saved in the old reservation mode.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Configure the DHCPv6 server to reserve IPv6 prefixes based on DUIDs in IPv6 address pool 0.

<Sysname> system-view

[Sysname] ipv6 pool 0

[Sysname-ipv6-pool-0] reserve expired-pd enable

[Sysname-ipv6-pool-0] reserve expired-pd mode duid

Related commands

display ipv6 dhcp server expired-pd

reset dhcpv6-access packet statistics

Use reset dhcpv6-access packet statistics to clear packet statistics for the DHCPv6 access module.

Syntax

reset dhcpv6-access packet statistics

Views

User view

Predefined user roles

network-admin

Examples

# Clear packet statistics for the DHCPv6 access module.

<Sysname> reset dhcpv6-access packet statistics

Related commands

display dhcpv6-access packet statistics

reset ipv6 dhcp pool-usage peak

Use reset ipv6 dhcp pool-usage peak to clear peak resource usage information for an IPv6 pool.

Syntax

reset ipv6 dhcp pool-usage peak [ pool pool-name ]

Views

User view

Predefined user roles

network-admin

Parameters

pool pool-name: Specifies an IPv6 pool by its name. The pool-name argument is a case-insensitive string of 1 to 63 characters. If you do not specify this option, this command clears peak resource usage information for all IPv6 pools.

Usage guidelines

To clear peak resource usage information for all IPv6 pools, execute the reset dhcp pool-usage peak command without specifying an IP pool. Then, if you execute the display ipv6 dhcp pool-usage peak command again, the command displays the new peak resource usage data collected for each IP pool after you executed the reset command.

Examples

# Clear peak resource usage information for all IPv6 pools.

<Sysname> reset ipv6 dhcp pool-usage peak

Related commands

display ipv6 dhcp pool-usage

reset ipv6 dhcp server conflict

Use reset ipv6 dhcp server conflict to clear IPv6 address conflict information.

Syntax

reset ipv6 dhcp server conflict [ address start-ipv6-address [ end-ipv6-address ] ] [ vpn-instance vpn-instance-name ]

Views

User view

Predefined user roles

network-admin

Parameters

address start-ipv6-address [ end-ipv6-address ]: Clears conflict information for addresses in the specified IPv6 address range. If you do not specify an IPv6 address, this command clears all IPv6 address conflict information.

· start-ip-address: Specifies a start IPv6 address.

· end-ip-address: Specifies an end IPv6 address. The end IPv6 address cannot be lower than the start IPv6 address. If you do not specify this argument, this command clears conflict information for the start IPv6 address (if any).

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears conflict information about IPv6 addresses for the public network.

Usage guidelines

Address conflicts occur when dynamically assigned IPv6 addresses have been statically configured for other hosts. After the conflicts are resolved, you can use the reset ipv6 dhcp server conflict command to clear conflict information so that the conflicting addresses can be assigned to clients.

Examples

# Clear all IPv6 address conflict information.

<Sysname> reset ipv6 dhcp server conflict

Related commands

display ipv6 dhcp server conflict

reset ipv6 dhcp server expired-ip

Use reset ipv6 dhcp server expired-ip to clear binding information for lease-expired IPv6 addresses.

Syntax

reset ipv6 dhcp server expired-ip [ [ address start-ipv6-address [ end-ipv6-address ] ] [ vpn-instance vpn-instance-name ] | pool pool-name ]

Views

User view

Predefined user roles

network-admin

Parameters

address start-ipv6-address [ end-ipv6-address ]: Clears binding information for lease-expired addresses in the specified IPv6 address range. If you do not specify an IPv6 address, this command clears binding information for all lease-expired IPv6 address.

· start-ip-address: Specifies a start IPv6 address.

· end-ip-address: Specifies an end IPv6 address. The end IPv6 address cannot be lower than the start IPv6 address. If you do not specify this argument, this command clears binding information for the start IPv6 address (if lease-expired).

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears binding information about lease-expired IPv6 addresses for the public network.

pool pool-name: Clears binding information for lease-expired IPv6 addresses in the address pool specified by its name, a case-insensitive string of 1 to 63 characters. If you do not specify an address pool, this command clears binding information for lease-expired IPv6 addresses in all address pools.

Examples

# Clear binding information for expired IPv6 address 2001:f3e0::1.

<Sysname> reset ipv6 dhcp server expired-ip address 2001:f3e0::1

Related commands

display ipv6 dhcp server expired-ip

reset ipv6 dhcp server expired-pd

Use reset ipv6 dhcp server expired-pd to clear binding information for lease-expired IPv6 prefixes.

Syntax

reset ipv6 dhcp server expired-pd [ pool pool-name | [ prefix start-prefix/prefix-len [ end-prefix/prefix-len ] ] [ vpn-instance vpn-instance-name ] ]

Views

User view

Predefined user roles

network-admin

Parameters

pool pool-name: Clears binding information for lease-expired IPv6 prefixes in the address pool specified by its name, a case-insensitive string of 1 to 63 characters.

prefix start-prefix/prefix-len [ end-prefix/prefix-len ]: Clears binding information for lease-expired prefixes in the specified IPv6 prefix range. The value range for the prefix-len argument is 1 to 128.

· start-prefix/prefix-len: Specifies a start IPv6 prefix.

· end-prefix/prefix-len: Specifies an end IPv6 prefix. The end IPv6 prefix cannot be lower than the start IPv6 prefix. The prefix length for the start IPv6 prefix and the end IPv6 prefix must be the same. If you do not specify this argument, this command clears binding information for the start IPv6 prefix (if lease-expired).

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears binding information about lease-expired IPv6 prefixes for the public network.

Usage guidelines

When a client goes offline, the client IPv6 prefix lease will become expired. You can use this command to clear binding information for lease-expired IPv6 prefixes.

If you do not specify any parameters, this command clears binding information for all lease-expired DHCPv6 prefixes.

Examples

# Clear binding information for all lease-expired IPv6 prefixes.

<Sysname> reset ipv6 dhcp server expired-pd

Related commands

display ipv6 dhcp server expired-pd

reset ipv6 dhcp server ip-in-use

Use reset ipv6 dhcp server ip-in-use to clear binding information for assigned IPv6 addresses.

Syntax

reset ipv6 dhcp server ip-in-use [ [ address start-ipv6-address [ end-ipv6-address ] | relay-address ipv6-address ] [ vpn-instance vpn-instance-name ] | pool pool-name [ relay-address ipv6-address ] ]

Views

User view

Predefined user roles

network-admin

Parameters

address start-ipv6-address [ end-ipv6-address ]: Clears binding information for addresses in the specified IPv6 address range. If you do not specify an IPv6 address, this command clears binding information for all assigned IPv6 addresses.

· start-ip-address: Specifies a start IPv6 address.

relay-address ip-address: Specifies the IPv6 address of a relay interface that connects to the DHCPv6 clients. This command clears the bindings that use this address as the gateway address.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears binding information about assigned IPv6 addresses for the public network.

pool pool-name: Clears binding information for assigned IPv6 addresses in the IPv6 address pool specified by its name, a case-insensitive string of 1 to 63 characters. If you do not specify an IPv6 address pool, this command clears binding information for assigned IPv6 addresses in IPv6 all address pools.

relay-address ip-address: Specifies the IPv6 address of a relay interface that connects to the DHCPv6 clients. This command clears the bindings that use this address as the gateway address in the IPv6 address pool.

Usage guidelines

If no parameters are specified, this command clears all address bindings on the device.

If you execute this command to clear information about an assigned static binding, the static binding becomes a free static binding.

Examples

# Clear binding information for all assigned IPv6 addresses.

<Sysname> reset ipv6 dhcp server ip-in-use

# Clears binding information for assigned IPv6 addresses in IPv6 address pool 1.

<Sysname> reset ipv6 dhcp server ip-in-use pool 1

# Clears binding information for the assigned IPv6 address 2001:0:0:1::1.

<Sysname> reset ipv6 dhcp server ip-in-use address 2001:0:0:1::1

Related commands

display ipv6 dhcp server ip-in-use

reset ipv6 dhcp server packet statistics

Use reset ipv6 dhcp server packet statistics to clear DHCPv6 server packet statistics.

Syntax

reset ipv6 dhcp server packet statistics [ vpn-instance vpn-instance-name ]

Views

User view

Predefined user roles

network-admin

Parameters

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears DHCPv6 server packet statistics for the public network.

Examples

# Clear packet statistics for all DHCPv6 servers.

<Sysname> reset ipv6 dhcp server packet statistics

Related commands

display ipv6 dhcp server packet statistics

reset ipv6 dhcp server pd-in-use

Use reset ipv6 dhcp server pd-in-use to clear binding information for assigned IPv6 prefixes.

Syntax

reset ipv6 dhcp server pd-in-use [ pool pool-name [ relay-address ipv6-address ] | [ prefix start-prefix/prefix-len [ end-prefix/prefix-len ] | relay-address ipv6-address ] [ vpn-instance vpn-instance-name ] ]

Views

User view

Predefined user roles

network-admin

Parameters

pool pool-name: Clears binding information for assigned IPv6 prefixes in the IPv6 address pool specified by its name, a case-insensitive string of 1 to 63 characters. If you do not specify an IPv6 address pool, this command clears binding information for assigned IPv6 prefixes in all IPv6 address pools.

relay-address ip-address: Specifies the IPv6 address of a relay interface that connects to the DHCPv6 clients. This command clears the prefix bindings that use this address as the gateway address in the IPv6 address pool.

prefix start-prefix/prefix-len [ end-prefix/prefix-len ]: Clears binding information for prefixes in the specified assigned IPv6 prefix range. The value range for the prefix-len argument is 1 to 128. If you do not specify an IPv6 prefix, this command clears binding information for all assigned IPv6 prefixes.

· start-prefix/prefix-len: Specifies a start IPv6 prefix .

relay-address ip-address: Specifies the IPv6 address of a relay interface that connects to the DHCPv6 clients. This command clears the prefix bindings that use this address as the gateway address.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears binding information about assigned IPv6 prefixes for the public network.

Usage guidelines

If no parameters are specified, this command clears all prefix bindings on the device.

If you execute this command to clear information about an assigned static binding, the static binding becomes a free static binding.

Examples

# Clear binding information for all assigned IPv6 prefixes.

<Sysname> reset ipv6 dhcp server pd-in-use

# Clears binding information for assigned IPv6 prefixes in IPv6 address pool 1.

<Sysname> reset ipv6 dhcp server pd-in-use pool 1

# Clears binding information for the assigned IPv6 prefix 2001:0:0:1::/64.

<Sysname> reset ipv6 dhcp server pd-in-use prefix 2001:0:0:1::/64

Related commands

display ipv6 dhcp server pd-in-use

route-log enable

Use route-log enable to enable route logging for an IPv6 address pool.

Use undo route-log enable to disable route logging for an IPv6 address pool.

Syntax

route-log enable

undo route-log enable

Default

Route logging is disabled for an IPv6 address pool.

Views

IPv6 pool view

Predefined user roles

network-admin

Usage guidelines

After you enable this feature for an IPv6 address pool, the DHCPv6 server generates log messages for route events that occur in the IPv6 address pool. Route events include network route adding or deletion.

To enable route logging for IPv6 address pools, use one of the following commands:

· ipv6 dhcp route-log enable

This command enables route logging for all types of IPv6 address pools on the DHCPv6 server.

· route-log enable

This command enables route logging for a single IPv6 address pool on the DHCPv6 server. To enable route logging for only one IPv6 address pool, perform the following task:

a. Verify that route logging is disabled for all IPv6 address pools on the DHCPv6 server.

You can use the undo ipv6 dhcp route-log enable command to disable route logging for all IPv6 address pools.

b. Use the route-log enable command in the view of the target IPv6 address pool.

Examples

# Enable route logging for IPv6 address pool 1.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] route-log enable

Related commands

ipv6 dhcp route-log enable

sip-server

Use sip-server to specify the IPv6 address or domain name of a SIP server in the IPv6 address pool.

Use undo sip-server to remove a SIP server.

Syntax

sip-server { address ipv6-address | domain-name domain-name }

undo sip-server { address ipv6-address | domain-name domain-name }

Default

No SIP server address or domain name is specified.

Views

IPv6 address pool view

DHCPv6 option group view

Predefined user roles

network-admin

Parameters

address ipv6-address: Specifies the IPv6 address of a SIP server.

domain-name domain-name: Specifies the domain name of a SIP server, a case-insensitive string of 1 to 50 characters.

Usage guidelines

You can specify up to eight SIP server addresses and eight SIP server domain names in an address pool. A SIP server that is specified earlier has a higher preference.

Examples

# Specify the SIP server address 2:2::4 in IPv6 address pool 1.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] sip-server address 2:2::4

# Specify the SIP server domain name bbb.com in IPv6 address pool 1.

[Sysname-ipv6-pool-1] sip-server domain-name bbb.com

Related commands

display ipv6 pool

snmp-agent trap enable ipv6 dhcp server

Use snmp-agent trap enable ipv6 dhcp server to enable SNMP notifications for the DHCPv6 server.

Use undo snmp-agent trap enable ipv6 dhcp server to disable SNMP notifications for the DHCPv6 server.

Syntax

Default

SNMP notifications are enabled for the DHCPv6 server.

Views

System view

Predefined user roles

network-admin

Parameters

address-exhaust: Generates alarm notifications for IPv6 address exhaustion events. IPv6 address exhaustion events include address exhaustion alarms and recoveries from address exhaustion conditions.

ip-alloc-failed: Generates alarm notifications for IPv6 address allocation failure.

pd-alloc-failed: Generates alarm notifications for IPv6 prefix allocation failure.

ip-in-use: Generates IPv6 address usage notifications. An IPv6 address usage notification is generated when an IPv6 address usage event occurs. IPv6 address usage events include alarms of address usage threshold violation and recoveries from threshold violation conditions. If you specify this keyword, the DHCPv6 server will poll the IPv6 address usage of each IPv6 pool at specific intervals. The IPv6 address usage threshold is set by using the ip-in-use threshold command.

pd-exhaust: Generates alarm notifications for IPv6 prefix exhaustion events. An IPv6 prefix exhaustion notification is generated when all IPv6 prefixes in an IPv6 address pool are used up or when an IPv6 address pool recovers from an IPv6 prefix exhaustion condition.

pd-in-use: Generates prefix usage notifications. A prefix usage notification is generated when an IPv6 prefix usage event occurs. IPv6 prefix usage events include alarms of prefix usage threshold violation and recoveries from threshold violation conditions. If you specify this keyword, the DHCPv6 server will poll the prefix usage of each IPv6 pool at specific intervals. The prefix usage threshold is set by using the pd-in-use threshold command.

pool-group-exhaust: Generates alarm notifications for IPv6 resource exhaustion events. IPv6 resource exhaustion events include address exhaustion alarms, prefix exhaustion alarms, recoveries from address exhaustion conditions, and recoveries from prefix exhaustion conditions.

pool-group-threshold: Generates IPv6 resource usage notifications. An IPv6 resource usage notification is generated when an IPv6 resource usage event occurs. IPv6 resource usage events include alarms of address usage threshold violation, alarms of prefix usage threshold violation, and recoveries from threshold violation conditions. The address usage threshold is set by using the ip-in-use threshold command. The prefix usage threshold is set by using the pd-in-use threshold command.

Usage guidelines

If you do not specify any parameters, this command enables SNMP notifications for all types of DHCPv6 server events.

To report critical DHCPv6 server events, enable SNMP notifications for the DHCPv6 server. For DHCPv6 server event notifications to be sent correctly, you must also configure SNMP on the device. For more information about configuring SNMP, see Network Management and Monitoring Configuration Guide.

Examples

# Enable SNMP notifications for all types of events.

<Sysname> system-view

[Sysname] snmp-agent trap enable ipv6 dhcp server

# Enable SNMP IPv6 address exhaustion notifications.

<Sysname> system-view

[Sysname] snmp-agent trap enable ipv6 dhcp server address-exhaust

# Enable SNMP IPv6 address usage alarm notifications.

<Sysname> system-view

[Sysname] snmp-agent trap enable ipv6 dhcp server ip-in-use

# Enable SNMP IPv6 prefix exhaustion alarm notifications.

<Sysname> system-view

[Sysname] snmp-agent trap enable ipv6 dhcp server pd-exhaust

# Enable SNMP IPv6 prefix usage alarm notifications.

<Sysname> system-view

[Sysname] snmp-agent trap enable ipv6 dhcp server pd-in-use

Related commands

ip-in-use threshold

pd-in-use threshold

snmp-agent target-host (Network Management and Monitoring Command Reference)

static-bind

Use static-bind to statically bind an IPv6 address or prefix to a client in the IPv6 address pool.

Use undo static-bind to delete a static binding.

Syntax

static-bind { address ipv6-address/addr-prefix-length | prefix prefix/prefix-len } duid duid [ iaid iaid ] [ preferred-lifetime preferred-lifetime valid-lifetime valid-lifetime ]

undo static-bind { address ipv6-address/addr-prefix-length | prefix prefix/prefix-len }

Default

No static binding is configured in an IPv6 address pool.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

address ipv6-address/addr-prefix-length: Specifies the IPv6 address and prefix length. The value range for the prefix length is 1 to 128. You can set the prefix length to 128 only for the BRAS network.

prefix prefix/prefix-len: Specifies the prefix and prefix length. The value range for the prefix length is 1 to 128.

duid duid: Specifies a client DUID. The value is an even hexadecimal number in the range of 2 to 256.

iaid iaid: Specifies a client IAID. The value is a hexadecimal number in the range of 0 to FFFFFFFF. If you do not specify an IAID, the server does not match the client IAID for prefix assignment.

preferred-lifetime preferred-lifetime: Sets the preferred lifetime of the address or prefix. The value range is 60 to 4294967295 seconds, and the default is 604800 seconds (7 days).

valid-lifetime valid-lifetime: Sets the valid lifetime of the address or prefix. The value range is 60 to 4294967295 seconds, and the default is 2592000 seconds (30 days). The valid lifetime cannot be shorter than the preferred lifetime.

Usage guidelines

You cannot specify an IPv6 address or prefix in a static binding if you have excluded it from DHCP allocation by using the ipv6 dhcp server forbidden-ip or ipv6 dhcp server forbidden-prefix command, respectively.

You can specify multiple static bindings in an IPv6 address pool.

An IPv6 address or prefix can be bound to only one DHCPv6 client.

To modify a static binding, execute the undo static-bind command to delete the binding, and then execute the static-bind command.

Examples

# In address pool 1, bind IPv6 address 2001:0410::/35 to the client DUID 0003000100e0fc005552 and IAID A1A1A1A1.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] static-bind address 2001:0410::1/35 duid 0003000100e0fc005552 iaid A1A1A1A1

# In address pool 1, bind prefix 2001:0410::/35 to the client DUID 00030001CA0006A400 and IAID A1A1A1A1.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] static-bind prefix 2001:0410::/35 duid 00030001CA0006A400 iaid A1A1A1A1

Related commands

display ipv6 pool

temporary address range

Use temporary address range to configure a temporary IPv6 address range in an IPv6 address pool for dynamic allocation.

Use undo temporary address range to restore the default.

Syntax

temporary address range start-ipv6-address end-ipv6-address [ preferred-lifetime preferred-lifetime valid-lifetime valid-lifetime ]

undo temporary address range

Default

No temporary IPv6 address range is configured in an IPv6 address pool.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

start-ipv6-address: Specifies the start IPv6 address.

end-ipv6-address: Specifies the end IPv6 address.

preferred-lifetime preferred-lifetime: Sets the preferred lifetime. The value range is 60 to 4294967295 seconds, and the default is 604800 seconds (7 days).

valid-lifetime valid-lifetime: Sets the valid lifetime. The value range is 60 to 4294967295 seconds, and the default is 2592000 seconds (30 days). The valid lifetime cannot be shorter than the preferred lifetime.

Usage guidelines

If you do not execute the temporary address range command, the DHCPv6 server does not support temporary address assignment.

You can configure only one temporary IPv6 address range in an address pool. If you execute this command multiple times, the most recent configuration takes effect.

Examples

# In IPv6 address pool 1, configure a temporary IPv6 address range from 3ffe:501:ffff:100::50 to 3ffe:501:ffff:100::60.

<Sysname> system-view

[Sysname] ipv6 pool 1

[Sysname-ipv6-pool-1] network 3ffe:501:ffff:100::/64

[Sysname-ipv6-pool-1] temporary address range 3ffe:501:ffff:100::50 3ffe:501:ffff:100::60

Related commands

display ipv6 pool

address range

network

unr preference

Use unr preference to set an IPv6 UNR preference value for an IPv6 address pool.

Use undo unr preference to restore the default.

Syntax

unr preference preference-value

undo unr preference

Default

The IPv6 UNR preference value is 65 for an IPv6 address pool.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

preference-value: Sets a UNR preference value. The value range for this argument is 1 to 255.

Usage guidelines

When the DHCPv6 server assigns an IPv6 address, it adds the network route for the IPv6 address to the route management module. A smaller UNR preference value indicates a higher priority.

The preference value modification does not affect the preference value for network routes that have been advertised.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the UNR preference value to 1 for IPv6 address pool p1.

<Sysname> system-view

[Sysname] ipv6 pool p1 bas local

[Sysname-ipv6-pool-p1] unr preference 1

unr tag

Use unr tag to set a UNR tag value for an IPv6 address pool.

Use undo unr tag to restore the default.

Syntax

unr tag tag-value

undo unr

Default

No UNR value is set for an IPv6 address pool.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

tag-value: Sets a UNR tag value, in the range of 0 to 4294967294.

Usage guidelines

When the DHCPv6 server assigns an IP address, it adds the network route for the IP address to the route management module. In a BAS network, you can classify user network routes based on their UNR tag values for route redistribution.

The tag value modification does not affect the tag value for network routes that have been advertised.

You can set a tag value in system view or in IPv6 address pool view. For BAS access users, the value set in IPv6 address pool view has higher priority than the one set in system view.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Set the network route tag value to 1 for IPv6 address pool p1.

<Sysname> system-view

[Sysname] ipv6 pool p1

[Sysname-ipv6-pool-p1] unr tag 1

vpn-instance (IPv6 address pool view)

Use vpn-instance to apply an IPv6 address pool to a VPN instance.

Use undo vpn-instance to restore the default.

Syntax

vpn-instance vpn-instance-name

undo vpn-instance

Default

The IPv6 address pool is not applied to any VPN instance.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, the IPv6 address pool belongs to the public network.

Usage guidelines

If an IPv6 address pool is applied to a VPN instance, the DHCPv6 server assigns IPv6 addresses in this address pool to clients in the specified VPN instance.

The DHCPv6 server identifies the VPN instance to which a DHCPv6 client belongs according to the following information:

· The client's VPN information stored in authentication modules, such as IPoE.

· The VPN information of the DHCPv6 server's interface that receives DHCPv6 packets from the client.

The VPN information from authentication modules takes priority over the VPN information of the receiving interface.

Examples

# Apply IPv6 address pool 0 to the VPN instance abc.

<Sysname> system-view

[Sysname] ipv6 pool 0

[Sysname-ipv6-pool-0] vpn-instance abc

vpn-instance (IPv6 address pool group view)

Use vpn-instance to apply an IPv6 address pool group to a VPN instance.

Use undo vpn-instance to restore the default.

Syntax

vpn-instance vpn-instance-name

undo vpn-instance

Default

The IPv6 address pool group is not applied to any VPN instance.

Views

IPv6 address pool group view

Predefined user roles

network-admin

Parameters

vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If the VPN instance is not created when you execute this command, the command can be successfully executed, but it does not take effect.

Usage guidelines

If an IPv6 address pool group is applied to a VPN instance, the address pool group provides DHCPv6 services for DHCPv6 clients in the specified VPN instance. If an IPv6 address pool group is not applied to a VPN instance, the address pool group provides DHCPv6 services for DHCPv6 clients on the public network.

Examples

# Apply IPv6 address pool group g1 to VPN instance abc.

<Sysname> system-view

[Sysname]ipv6 pool-group g1

[Sysname-ipv6-pool-group-g1] vpn-instance abc

DHCPv6 relay agent commands

dhcpv6-relay source-address

Use dhcpv6-relay source-address to specify the source IPv6 address of the DHCPv6 requests that the DHCPv6 relay agent forwards to the DHCPv6 server.

Use undo dhcpv6-relay source-address to restore the default.

Syntax

dhcpv6-relay source-address { ipv6-address | gateway | interface interface-type interface-number }

undo dhcpv6-relay source-address

Default

The relay agent chooses the default source IPv6 address for relayed requests depending on whether its server-side interface and the DHCPv6 server belong to the same VPN instance:

· If they belong to the same VPN instance, the relay agent uses an IPv6 global unicast address of the output interface for relayed requests as the source IP address.

· If they belong to different VPN instances, the relay agent uses the lowest IPv6 address that is in the same VPN instance as the DHCPv6 server as the source IP address.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies the source IPv6 address for the DHCPv6 requests.

gateway: Uses the IPv6 address in the Link-address field as the source IPv6 address of the DHCPv6 requests. If the Link-address field is empty, the relay agent follows the default rule to specify the source IPv6 address for DHCPv6 requests.

interface interface-type interface-number: Uses the IPv6 address of the specified interface as the source IPv6 address. The interface-type interface-number argument specifies the interface type and the interface number.

Usage guidelines

This command is required if multiple relay interfaces share the same IPv6 address or if a relay interface does not have routes to DHCPv6 servers. You can use this command to specify the IPv6 address of another interface (typically a loopback interface) on the DHCPv6 relay agent as the source IPv6 address for relayed DHCPv6 requests.

Specify the gateway keyword if the DHCPv6 relay agent has a reachable route to the DHCPv6 address from the address filled in the Link-address field.

If you execute this command multiple times for an IPv6 address pool, the most recent configuration takes effect.

Examples

# In IPv6 address pool pool1, specify 2001:501:aabb::1/64 as the source IPv6 address for DHCPv6 requests.

<Sysname> system-view

[Sysname] ipv6 pool pool1

[Sysname-ipv6-pool-pool1] dhcpv6-relay source-address 2001:501:aabb::1

display ipv6 dhcp relay client-information address

Use display ipv6 dhcp relay client-information address to display DHCPv6 relay entries that record clients' IPv6 address information.

Syntax

display ipv6 dhcp relay client-information address [ interface interface-type interface-number | ipv6 ipv6-address ] [ vpn-instance vpn-instance-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays DHCPv6 relay entries that record clients' IPv6 address information on all interfaces enabled with DHCPv6 relay agent. For an IPoE individual roaming user, the command output is available only when this option specifies the access interface through which the roaming user comes online. But the command output displays the access interface where the roaming user is currently on. For more information about roaming for IPoE individual users, see IPoE configuration in BRAS Services Configuration Guide.

ipv6 ipv6-address: Specifies an IPv6 address. If you do not specify an IPv6 address, this command displays DHCPv6 relay entries for all IPv6 addresses.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays DHCPv6 relay entries that record clients' IPv6 address information for the public network.

Usage guidelines

The relay entry recording feature operates differently depending on the user type, as follows:

· For non-WAN access users (for example, IPoE or PPPoE users), the DHCPv6 relay agent records DHCPv6 relay entries only after you execute the ipv6 dhcp relay client-information record command.

· For WAN access users, the DHCPv6 relay agent generates relay entries as follows:

¡ Without an authorized IPv6 pool, the DHCPv6 relay agent generates relay entries for WAN access users (for example, IPoE or PPPoE users) automatically, which cannot be manually disabled.

¡ With an authorized IPv6 pool, the relay agent does not generate relay entries for WAN access users (for example, IPoE or PPPoE users). To display the client address information for such users, execute the display ipv6 dhcp server ip-in-use command on the DHCPv6 server.

Examples

# Display all DHCPv6 relay entries that record clients' IPv6 address information.

<Sysname> display ipv6 dhcp relay client-information address

1 DHCPv6 relay entries found.

IPv6 address IAID Lease Status Interface

2::1 0x00030001 54 Open XGE3/0/1

# Display the DHCPv6 relay entry for the IPv6 address 2::1.

<Sysname> display ipv6 dhcp relay client-information address ipv6 2::1

1 DHCPv6 relay entries found.

IPv6 address: 2::1

DUID: 00030001CA000C180000

IAID: 0x00030001

Port index: N/A

Interface: XGE3/0/1

Outer VLAN: N/A

Inner VLAN: N/A

Status: Open

Access type: CommonV6

PPP index: N/A

Remaining lease time: 54 seconds

Preferred lifetime: 400 seconds

Valid lifetime: 500 seconds

User ID: 0x40000003

Table 26 Command output

Field	Description
x DHCPv6 relay entries found.	Number of DHCPv6 relay entries that record clients' IPv6 address information.
IPv6 address	IPv6 address of the DHCPv6 client.
DUID	DUID of the DHCPv6 client.
IAID	IAID of the DHCPv6 client.
Port index	Layer 2 port that receives the client's request. If the request is not received through a Layer 2 port, this field displays N/A.
Interface	Interface enabled with DHCPv6 relay agent. This field displays N/A if the entry does not contain interface information or if the interface index in the entry loses effect.
Outer VLAN	Outer VLAN tag contained in the client's request. If the request does not contain an outer VLAN tag, this field displays N/A.
Inner VLAN	Inner VLAN tag contained in the client's request. If the request does not contain an inner VLAN tag, this field displays N/A.
Status	State of the DHCPv6 relay entry: · OPEN—The DHCPv6 client has obtained an IPv6 address or renewed the lease. · SOLICIT—The DHCPv6 relay agent receives a Solicit message that contains a Rapid Commit option from the DHCPv6 client. · REQUEST—The DHCPv6 relay agent receives a Request message from the DHCPv6 client. · RELEASE—The DHCPv6 relay agent receives a Release message from the DHCPv6 client. · DECLINE—The DHCPv6 relay agent receives a Decline message from the DHCPv6 client. · RENEW—The DHCPv6 relay agent receives a Renew message from the DHCPv6 client. · REBIND—The DHCPv6 relay agent receives a Rebind message from the DHCPv6 client.
Access type	Access type of the DHCPv6 client: · Commonv6—DHCPv6. · IPoEv6—IPoE. · PPPv6—PPP.
PPP index	PPP session index. If no PPP session index exists, this field displays N/A.
Remaining lease time	Remaining time in seconds of the IPv6 address lease.
Preferred lifetime	Preferred lifetime in seconds of the IPv6 address.
Valid lifetime	Valid lifetime in seconds of the IPv6 address.
User ID	ID of the DHCPv6 access user, in hexadecimal notation.

‌

Related commands

ipv6 dhcp relay client-information record

reset ipv6 dhcp relay client-information address

display ipv6 dhcp relay client-information pd

Use display ipv6 dhcp relay client-information pd to display DHCPv6 relay entries that record clients' IPv6 prefix information.

Syntax

display ipv6 dhcp relay client-information pd [ interface interface-type interface-number | prefix prefix/prefix-len ] [ vpn-instance vpn-instance-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays DHCPv6 relay entries that record clients' IPv6 prefix information on all interfaces enabled with DHCPv6 relay agent. To obtain information for an IPoE individual roaming user, you must specify the initial interface through which the roaming user came online, even though the command output displays the current access interface for the roaming user. For more information about roaming for IPoE individual users, see IPoE configuration in BRAS Services Configuration Guide.

prefix prefix/prefix-len: Specifies an IPv6 prefix with its length. The value range for the prefix-len argument is 1 to 128. If you do not specify an IPv6 prefix, this command displays DHCPv6 relay entries for all IPv6 prefixes.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays DHCPv6 relay entries that record clients' IPv6 prefix information for the public network.

Usage guidelines

The relay entry recording feature operates differently depending on the user type, as follows:

· For non-WAN access users (for example, IPoE or PPPoE users), the DHCPv6 relay agent records DHCPv6 relay entries only after you execute the ipv6 dhcp relay client-information record command.

· For WAN access users, the DHCPv6 relay agent generates relay entries as follows:

¡ Without an authorized IPv6 pool, the DHCPv6 relay agent generates relay entries for WAN access users (for example, IPoE or PPPoE users) automatically, which cannot be manually disabled.

¡ With an authorized IPv6 pool, the relay agent does not generate relay entries for WAN access users (for example, IPoE or PPPoE users). To display the client prefix information for such users, execute the display ipv6 dhcp server pd-in-use command on the DHCPv6 server.

Examples

# Display all DHCPv6 relay entries that record clients' IPv6 prefix information.

<Sysname> display ipv6 dhcp relay client-information pd

1 DHCPv6 relay entries found.

Prefix IAID Lease Status Interface

2::/64 0x00030001 54 Open XGE3/0/1

# Display the DHCPv6 relay entry for the IPv6 prefix 2::/64.

<Sysname> display ipv6 dhcp relay client-information pd prefix 2::/64

1 DHCPv6 relay entries found.

Prefix: 2::/64

DUID: 00030001CA000C180000

IAID: 0x00030001

Port index: N/A

Interface: XGE3/0/1

Outer VLAN: N/A

Inner VLAN: N/A

Status: Open

Access type: CommonV6

PPP index: N/A

Remaining lease time: 54 seconds

Preferred lifetime: 400 seconds

Valid lifetime: 500 seconds

User ID: 0x40000003

Table 27 Command output

Field	Description
x DHCPv6 relay entries found.	Number of DHCPv6 relay entries that record clients' IPv6 prefix information.
Prefix	IPv6 prefix of the DHCPv6 client.
DUID	DUID of the DHCPv6 client.
IAID	IAID of the DHCPv6 client.
Port index	Layer 2 port that receives the client's request. If the request is not received through a Layer 2 port, this field displays N/A.
Interface	Interface enabled with DHCPv6 relay agent. This field displays N/A if the entry does not contain interface information or if the interface index in the entry loses effect.
Outer VLAN	Outer VLAN tag contained in the client's request. If the request does not contain an outer VLAN tag, this field displays N/A.
Inner VLAN	Inner VLAN tag contained in the client's request. If the request does not contain an inner VLAN tag, this field displays N/A.
Status	State of the DHCPv6 relay entry: · OPEN—The DHCPv6 client has obtained an IPv6 prefix or renewed the lease. · SOLICIT—The DHCPv6 relay agent receives a Solicit message that contains a Rapid Commit option from the DHCPv6 client. · REQUEST—The DHCPv6 relay agent receives a Request message from the DHCPv6 client. · RELEASE—The DHCPv6 relay agent receives a Release message from the DHCPv6 client. · DECLINE—The DHCPv6 relay agent receives a Decline message from the DHCPv6 client. · RENEW—The DHCPv6 relay agent receives a Renew message from the DHCPv6 client. · REBIND—The DHCPv6 relay agent receives a Rebind message from the DHCPv6 client.
Access type	Access type of the DHCPv6 client: · Commonv6—DHCPv6. · IPoEv6—IPoE. · PPPv6—PPP.
PPP index	PPP session index. If no PPP session index exists, this field displays N/A.
Remaining lease time	Remaining time in seconds of the IPv6 prefix lease.
Preferred lifetime	Preferred lifetime in seconds of the IPv6 prefix.
Valid lifetime	Valid lifetime in seconds of the IPv6 prefix.
User ID	ID of the DHCPv6 access user, in hexadecimal notation.

‌

Related commands

ipv6 dhcp relay client-information record

reset ipv6 dhcp relay client-information pd

display ipv6 dhcp relay packet statistics

Use display ipv6 dhcp relay packet statistics to display DHCPv6 packet statistics on the DHCPv6 relay agent.

Syntax

display ipv6 dhcp relay packet statistics [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Displays DHCPv6 packet statistics on the specified interface. If you do not specify an interface, this command displays all DHCPv6 packet statistics on the DHCPv6 relay agent.

Examples

# Display all DHCPv6 packet statistics on the DHCPv6 relay agent.

<Sysname> display ipv6 dhcp relay packet statistics

Packets dropped : 4

Roming duid-mismatch dropped : 0

Packets received : 14

Solicit : 0

Request : 0

Confirm : 0

Renew : 0

Rebind : 0

Release : 0

Decline : 0

Information-request : 7

Relay-forward : 0

Relay-reply : 7

Packets sent : 14

Advertise : 0

Reconfigure : 0

Reply : 7

Relay-forward : 7

Relay-reply : 0

Table 28 Command output

Field	Description
Packets dropped	Number of DHCPv6 messages dropped by the relay agent.
Roming duid-mismatch dropped	Number of DHCPv6 messages dropped because of roaming DUID mismatch.
Packets received	Number of DHCPv6 messages received from clients.
Solicit	Number of received Solict messages.
Request	Number of received Request messages.
Confirm	Number of received Confirm messages.
Renew	Number of received Renew messages.
Rebind	Number of received Rebind messages.
Release	Number of received Release messages.
Decline	Number of received Decline messages.
Information-request	Number of received Information-request messages.
Relay-forward	Number of received Relay-forward messages.
Relay-reply	Number of received Relay-reply messages.
Packets sent	Number of DHCPv6 messages sent by the relay agent.
Advertise	Number of sent Advertise messages.
Reconfigure	Number of sent Reconfigure messages.
Reply	Number of sent Reply messages.
Relay-forward	Number of sent Relay-forward messages.
Relay-reply	Number of sent Relay-reply messages.

Related commands

reset ipv6 dhcp relay statistics

display ipv6 dhcp relay remote-server-info

Use display ipv6 dhcp relay remote-server-info to display the DHCPv6 server configuration and status in the DHCPv6 address pool on the DHCPv6 relay agent.

Syntax

display ipv6 dhcp relay remote-server-info [ vpn-instance vpn-name ] [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. To specify DHCPv6 servers on the public network, do not specify this option.

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays DHCP server information on the active MPU.

Examples

# Display the DHCPv6 server configuration and status in the DHCPv6 address pool on the DHCPv6 relay agent.

<Sysname> display ipv6 dhcp relay remote-server-info

Remote server count: 2

Remote server: 100::1 * Out interface: Ten-GigabitEthernet3/0/4

RemoteSrvRefCnt: 2 State: Up

CfgTimeOut: 12(s) CfgDeadCount: 10 CfgDeadTime: 10(m)

RunDeadCnt: 0 RunDeadTime: 1968(s)

Remote server: 100::2 Out interface: N/A

RemoteSrvRefCnt: 1 State: Up

CfgTimeOut: 13(s) CfgDeadCount: 10 CfgDeadTime: 10(m)

RunDeadCnt: 0 RunDeadTime: 1968(s)

Table 29 Command output

Field	Description
Remote server count	Number of the DHCPv6 servers.
Remote server	IPv6 address of the DHCPv6 server. The asterisk * represents the DHCPv6 server liveness detection is configured for the DHCPv6 server. If the detection is not configured, no asterisk is displayed.
Out interface	Output interface specified on the DHCPv6 relay agent for the conveyed packets to be sent to the DHCPv6 server. If no output interface is specified, this field displays N/A.
RemoteSrvRefCnt	Number of times that the DHCPv6 server is referenced by the address pool on the DHCPv6 relay agent.
State	State of the DHCPv6 server: · Up—The server is available. · Down—The server is not available.
CfgTimeOut	Communication failure check timer in seconds.
CfgDeadCount	Maximum number of consecutive communication failures before the relay agent marks a DHCPv6 server as down.
CfgDeadTime	Time period in minutes for the relay agent to wait before communicating with the DHCPv6 server.
RunDeadCnt	Number of consecutive communication failures.
RunDeadTime	Dead time in seconds of the DHCPv6 server.

‌

Related commands

ipv6 dhcp remote-server

remote-server algorithm

remote-server

display ipv6 dhcp relay server-address

Use display ipv6 dhcp relay server-address to display DHCPv6 server addresses specified on the DHCPv6 relay agent.

Syntax

display ipv6 dhcp relay server-address [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays DHCPv6 server addresses on all interfaces enabled with DHCPv6 relay agent.

Examples

# Display DHCPv6 server addresses on all interfaces enabled with DHCPv6 relay agent.

<Sysname> display ipv6 dhcp relay server-address

Interface: Ten-GigabitEthernet3/0/1

Server address Outgoing Interface Public/VRF name

2::3

3::4 Ten-GigabitEthernet3/0/3 Y/--

Interface: Ten-GigabitEthernet3/0/2

Server address Outgoing Interface Public/VRF name

2::3

3::4 Ten-GigabitEthernet3/0/3 Y/--

# Display DHCPv6 server addresses on Ten-GigabitEthernet 3/0/1.

<Sysname> display ipv6 dhcp relay server-address interface ten-gigabitethernet 3/0/1

Interface: Ten-GigabitEthernet3/0/1

Server address Outgoing Interface Public/VRF name

2::3

3::4 Ten-GigabitEthernet3/0/3 Y/--

Table 30 Command output

Field	Description
Interface	Interface where the DHCPv6 relay agent is enabled.
Server address	DHCPv6 server address specified on the DHCPv6 relay agent.
Outgoing Interface	Output interface of DHCPv6 packets. If no output interface is specified, the device searches the routing table for the output interface.
Public/VRF name	Virtual network on which the DHCPv6 server is located. The displayed value depends on the setting for the dhcp relay server-address command. · If you do not specify an MPLS L3VPN instance or the public network, this field displays --/--. · If you specify the public network, this field displays Y/--. · If you specify an MPLS L3VPN instance, this field displays --/VPN-instance-name.

‌

Related commands

ipv6 dhcp relay server-address

ipv6 dhcp select

gateway-list

Use gateway-list to specify gateway addresses for DHCPv6 clients in an IPv6 address pool.

Use undo gateway-list to remove gateway addresses from an IPv6 address pool.

Syntax

gateway-list ipv6-address&<1-8>

undo gateway-list [ ipv6-address&<1-8> ]

Default

No gateway address is specified in an IPv6 address pool.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

ipv6-address&<1-8>: Specifies a space-separated list of up to eight addresses.

Usage guidelines

CAUTION:

To avoid forwarding failure, do not delete a gateway address from a gateway list if that gateway address is being used by online clients.

DHCPv6 clients of the same access type can be classified into different types by their locations. In this case, the relay interface typically has no IPv6 address configured. You can use the gateway-list command to specify gateway addresses for clients matching the same IPv6 address pool.

Upon receiving a DHCPv6 Solicit or Request from a client that matches an IPv6 address pool, the relay agent processes the packet as follows:

· Fills the link-address field of the packet with a specified gateway address.

· Forwards the packet to all DHCPv6 servers in the matching IPv6 address pool.

The DHCPv6 servers select an IPv6 address pool according to the gateway address.

Examples

# Specify the gateway address 10::1 in the IPv6 address pool p1.

<Sysname> system-view

[Sysname] ipv6 pool p1

[Sysname-ipv6-pool-p1] gateway-list 10::1

ipv6 dhcp client-detect

Use ipv6 dhcp client-detect to enable client offline detection on the DHCPv6 relay agent.

Use undo ipv6 dhcp client-detect to disable client offline detection on the DHCPv6 relay agent.

Syntax

ipv6 dhcp client-detect

undo ipv6 dhcp client-detect

Default

Client offline detection is disabled.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only after you enable the DHCPv6 relay agent and the recording of DHCPv6 relay entries on the interface.

Examples

# Enable client offline detection on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp select relay

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp relay client-information record

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp client-detect

ipv6 dhcp relay client-link-address enable

Use ipv6 dhcp relay client-link-address enable to enable the DHCPv6 relay agent to support Option 79.

Use undo ipv6 dhcp relay client-link-address enable to disable Option 79 support.

Syntax

ipv6 dhcp relay client-link-address enable

undo ipv6 dhcp relay client-link-address enable

Default

The DHCPv6 relay agent does not support Option 79.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

If DHCPv6 relay agents exist in the network, the DHCPv6 server needs the MAC address of the DHCPv6 client for authentication or for IPv6 address or prefix assignment. To meet the requirement, enable the DHCPv6 relay agent that the client first passes to support Option 79. This feature allows the DHCPv6 relay agent to learn the MAC address in the client request. When the relay agent generates a Relay-Forward packet for the request, it fills the MAC address of the client in Option 79. The Relay-Forward packet is then forwarded to the DHCPv6 server.

Examples

# Enable Option 79 support on the relay agent.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp relay client-link-address enable

ipv6 dhcp relay client-information record

Use ipv6 dhcp relay client-information record to enable recording client information in DHCPv6 relay entries.

Use undo ipv6 dhcp relay client-information record to disable recording client information in DHCPv6 relay entries.

Syntax

ipv6 dhcp relay client-information record

undo ipv6 dhcp relay client-information record

Default

The DHCPv6 relay agent does not record client information in DHCPv6 relay entries.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

The undo ipv6 dhcp relay client-information record command disables the recording of DHCPv6 relay entries and deletes all recorded DHCPv6 relay entries.

The following information applies to WAN access users (for example, IPoE or PPPoE users):

· Without an authorized IPv6 pool, the DHCPv6 relay agent generates relay entries for WAN access users automatically, which cannot be manually disabled.

· With an authorized IPv6 pool, the relay agent does not generate relay entries for WAN access users.

Examples

# Enable the recording of DHCPv6 relay entries on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp select relay

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp relay client-information record

Related commands

display ipv6 dhcp relay client-information address

display ipv6 dhcp relay client-information pd

ipv6 dhcp relay gateway

Use ipv6 dhcp relay gateway to specify a gateway address for DHCPv6 clients on the DHCPv6 relay interface.

Use undo ipv6 dhcp relay gateway to restore the default.

Syntax

ipv6 dhcp relay gateway ipv6-address

undo ipv6 dhcp relay gateway

Default

The first IPv6 address of the relay interface is used as the gateway address for DHCPv6 clients.

Views

Interface view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies a gateway address. The IPv6 address must be an IPv6 address of the relay interface.

Usage guidelines

The DHCPv6 relay agent uses the specified IPv6 address instead of the first IPv6 address of the relay interface as the gateway address for DHCPv6 clients.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify 10::1 as the gateway address for DHCPv6 clients on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp relay gateway 10::1

Related commands

gateway-list

ipv6 dhcp relay interface-id

Use ipv6 dhcp relay interface-id to specify a padding mode for the Interface-ID option.

Use undo ipv6 dhcp relay interface-id to restore the default.

Syntax

ipv6 dhcp relay interface-id { bas [ merge ] | cn-telecom | interface | tr-101 }

undo ipv6 dhcp relay interface-id

Default

The DHCPv6 relay agent fills the Interface-ID option with the interface index of the interface.

Views

Interface view

Predefined user roles

network-admin

Parameters

bas: Specifies the BAS mode. The relay agent in this mode pads the Interface and VLAN information to pad the Interface-ID option. The device encapsulates the information in the format of interface-type slot/subslot/port vxlan_id.vlan_id.subvlan_id_OLT.

merge: Specifies the bas merge mode. Upon receiving a DHCP request, the relay agent obtains the OLT information (including the interface that connects to the OLT and end user MAC address) from the request to fill in the OLT filed. If this keyword is not specified, all 0s are set in the OLT field.

cn-telecom: Specifies the China Telecom mode. This mode pads the Interface-ID option with interface information, numbers of the card and the subcard where the interface resides, and the inner VLAN and outer VLAN of the interface.

interface: Specifies the interface name mode. This mode pads the Interface-ID option in ASCII code with the interface name and VLAN ID of the interface.

tr-101: Specifies the TR-101 mode. This mode pads the Interface-ID option with interface information, number of the card where the interface resides, and the VLAN of the interface.

Usage guidelines

Enable the DHCPv6 relay agent on the interface before executing this command. Otherwise, the command does not take effect.

In a Telcom network, specify bas merge on the first DHCPv6 relay agent to ensure the DHCPv6 clients passes access authentication and obtain correct IPv6 addresses or prefixes.

Examples

# Specify the BAS mode as the padding mode for the Interface-ID option on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp relay interface-id bas

# Specify the interface name mode as the padding mode for the Interface-ID option on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp relay interface-id interface

ipv6 dhcp relay non-first-hop enable

Use ipv6 dhcp relay non-first-hop enable to enable the non-first-hop DHCPv6 relay agent feature.

Use undo ipv6 dhcp relay non-first-hop enable to disable the non-first-hop DHCPv6 relay agent feature.

Syntax

ipv6 dhcp relay non-first-hop enable

undo ipv6 dhcp relay non-first-hop enable

Default

The non-first-hop DHCPv6 relay agent feature is disabled.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

Multiple DHCPv6 relay agents might exist between a DHCPv6 client and a DHCPv6 server. By default, only the first DHCPv6 relay agent connected to the client processes the DHCPv6 requests from the client. The subsequent DHCPv6 relay agents only forward the requests. If you enable access authentication on the relay interface that acts as a non-first DHCPv6 relay agent, you must execute this command on that interface. This command enables the relay agent to deliver incoming DHCPv6 requests to the authentication module for authentication and authorization.

Enable this feature only on the non-first-hop relay interface where access authentication is enabled. To have this feature take effect on the interface, you must first enable the DHCPv6 relay agent on that interface.

Examples

# Enable the the non-first-hop DHCPv6 relay agent feature on interface Ten-GigabitEthernet3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp relay non-first-hop enable

Related commands

ipv6 dhcp select relay

ipv6 dhcp relay release-agent

Use ipv6 dhcp relay release-agent to enable IPv6 release notification.

Use undo ipv6 dhcp relay release-agent to restore the default.

Syntax

ipv6 dhcp relay release-agent

undo ipv6 dhcp relay release-agent

Default

IPv6 release notification is disabled.

Views

Interface view

Predefined user roles

network-admin

Usage guidelines

This command enables the DHCPv6 relay agent to send a Release message to the DHCPv6 server after it deletes a DHCPv6 relay entry. After the DHCPv6 server receives the message, it reclaims the IPv6 address or prefix and marks the lease as expired.

This command takes effect only after you enable the DHCPv6 relay agent and the recording of DHCPv6 relay entries on the interface.

Examples

# Enable IPv6 release notification on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp select relay

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp relay client-information record

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp relay release-agent

ipv6 dhcp relay server-address

Use ipv6 dhcp relay server-address to specify a DHCPv6 server on the DHCPv6 relay agent.

Use undo ipv6 dhcp relay server-address to remove DHCPv6 server addresses.

Syntax

ipv6 dhcp relay server-address ipv6-address [ interface interface-type interface-number | public | vpn-instance vpn-instance-name ]

undo ipv6 dhcp relay server-address [ ipv6-address [ interface interface-type interface-number | public | vpn-instance vpn-instance-name ] ]

Default

No DHCPv6 server address is specified on the DHCPv6 relay agent.

Views

Interface view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies the IPv6 address of a DHCPv6 server.

interface interface-type interface-number: Specifies an output interface through which the relay agent forwards the DHCPv6 requests to the DHCPv6 server. If you do not specify an output interface, the relay agent looks up the routing table for an output interface.

public: Specifies this option if the specified DHCPv6 server is on the public network.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the specified DHCPv6 server belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 32 characters.

Usage guidelines

Upon receiving a request from a DHCPv6 client, the interface encapsulates the request into a Relay-forward message and forwards the message to the specified DHCPv6 server.

You can specify a maximum of eight DHCPv6 servers on an interface. The DHCPv6 relay agent forwards DHCPv6 requests to all the specified DHCPv6 servers.

If the DHCPv6 server address is a link-local address or multicast address, you must specify an output interface. If you do not specify an output interface, DHCPv6 packets might fail to reach the DHCPv6 server.

The DHCPv6 relay agent forwards the packets from clients to the specified DHCPv6 server in the specified virtual network (MPLS L3VPN instance or the public network). If you do not specify an MPLS L3VPN instance or the public network, the DHCP relay agent forwards the packets from a client in the same virtual network as the client.

If you do not specify an IPv6 address, the undo ipv6 dhcp relay server-address command removes all DHCPv6 server addresses specified on the interface.

Do not enable the DHCPv6 client and the DHCPv6 relay agent on the same interface.

Examples

# Enable the DHCPv6 relay agent on Ten-GigabitEthernet 3/0/1 and specify the DHCPv6 server address 2001:1::3.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp select relay

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp relay server-address 2001:1::3

Related commands

display ipv6 dhcp relay remote-server-info

display ipv6 dhcp relay server-address

ipv6 dhcp remote-server

ipv6 dhcp select

remote-server algorithm

ipv6 dhcp relay server-address algorithm

Use ipv6 dhcp relay server-address algorithm to specify the DHCPv6 server selection algorithm.

Use undo ipv6 dhcp relay server-address algorithm to restore the default.

Syntax

ipv6 dhcp relay server-address algorithm { master-backup | polling }

undo ipv6 dhcp relay server-address algorithm

Default

The polling algorithm is used. The DHCPv6 relay agent forwards DHCPv6 requests to all DHCPv6 servers at the same time.

Views

Interface view

Predefined user roles

network-admin

Parameters

master-backup: Forwards DHCPv6 requests to the master DHCPv6 server first. If the master server is not available, the relay agent forwards DHCPv6 requests to backup DHCPv6 servers in the order they were specified.

polling: Forwards DHCPv6 requests to all DHCPv6 servers at the same time.

Usage guidelines

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify master-backup as the DHCPv6 server selection algorithm on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp relay server-address algorithm master-backup

Related commands

display ipv6 dhcp relay remote-server-info

ipv6 dhcp remote-server

remote-server

ipv6 dhcp relay source-address

Use ipv6 dhcp relay source-address to specify the source IPv6 address for relayed DHCPv6 requests.

Use undo ipv6 dhcp relay source-address to restore the default.

Syntax

ipv6 dhcp relay source-address { ipv6-address | interface interface-type interface-number }

undo ipv6 dhcp relay source-address

Default

The relay agent chooses the default source IPv6 address for relayed requests depending on whether its server-side interface and the DHCPv6 server belong to the same VPN instance:

· If they belong to the same VPN instance, the relay agent uses a global unicast address of the output interface for relayed requests.

· If they belong to different VPN instances, the relay agent uses the lowest IPv6 address that is in the same VPN instance as the DHCPv6 server.

Views

Interface view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies a source IPv6 address.

interface interface-type interface-number: Uses the IPv6 address of an interface as the source IPv6 address. The interface-type interface-number option specifies an interface by its type and number.

Usage guidelines

This command is required if a relay interface does not have routes to DHCPv6 servers. You can specify a global unicast address or the IPv6 address of another interface (typically the loopback interface) as the source IPv6 address for DHCPv6 requests. The relay interface inserts the source IPv6 address in the source IPv6 address field of DHCPv6 requests.

If the specified interface does not have a global unicast IPv6 address, the relay agent follows the default rule to specify the source IPv6 address for relayed DHCPv6 requests.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify 10::1 as the source IPv6 address for relayed DHCPv6 requests on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp relay source-address 10::1

ipv6 dhcp remote-server

Use ipv6 dhcp remote-server to configure DHCPv6 server liveness detection.

Use undo ipv6 dhcp remote-server to restore the default.

Syntax

ipv6 dhcp remote-server [ ipv6-address [ vpn-instance vpn-instance-name ] ] { dead-count dead-count-value | dead-time dead-time | timeout timeout } *

undo ipv6 dhcp remote-server [ ipv6-address [ vpn-instance vpn-instance-name ] ] { dead-count | dead-time | timeout } *

Default

If the DHCPv6 relay agent does not receive a reply from a DHCPv6 server within 55 seconds, the DHCPv6 relay agent determines that the DHCPv6 server is down.

Views

System view

Predefined user roles

network-admin

Parameters

Ipv6-address: Specifies an IP address of the DHCPv6 server. If you do not specify this keyword, the criteria apply to all DHCPv6 servers.

vpn-instance vpn-instance name: Specifies an MPLS L3VPN instance to which DHCP servers belongs. The vpn-instance-name argument specifies a VPN instance name, a case-sensitive string of 1 to 31 characters. If you do not specify this keyword, the criteria apply to DHCPv6 servers on the public network.

dead-count dead-count-value: Specifies the maximum number of consecutive communication failures before the relay agent marks a DHCPv6 server as down. The value range for the dead-count-value argument is 1 to 64, and the default value is 0.

dead-time dead-time: Specifies a time period (in minutes) for the relay agent to wait before communicating with the DHCPv6 server. The value range for the dead-time augment is 1 to 65536, and the default value is 3.

timeout timeout: Specifies a communication failure check timer in seconds. The value range for the argument is 1 to 60, and the default value is 25.

Usage guidelines

This feature is applicable when the relay agent selects a DHCPv6 server from a DHCPv6 address pool.

This feature enables the relay agent to detect the liveness of the DHCPv6 servers.

The DHCPv6 server liveness detection mechanism differs depending on the server selection algorithm.

If the master-backup selection algorithm applies, the relay agent uses the following mechanism to determine whether a DHCPv6 server is available:

1. When relaying the first request to a selected DHCPv6 server, the DHCPv6 relay agent starts the request counter and the timeout timer configured for that server.

2. The relay agent determines the availability of the DHCPv6 server:

¡ On receipt of a reply before the timeout timer expires, the relay agent resets the request counter and stops the timeout timer.

- The agent determines that the DHCPv6 server is not available and places it in down state, if the reply indicates an address or prefix assignment failure.

- The relay agent restarts the timer and the request counter when it relays a new request to the server.

¡ If the relay agent has not received a reply from the server when the timeout timer expires, the relay agent checks the request counter against the dead-count-value setting.

- If the number of requests does not exceed the dead-count-value setting, the relay agent continues to send new requests to the server without resetting the request counter.

- If the number of requests exceeds the dead-count-value setting, the relay agent determines that the DHCPv6 server is not available and places it in down state.

3. On receipt of a new request after it placed the server in down state, the relay agent forwards the new request to the next available server.

4. If none of the servers are available, the relay agent forwards the new request to all servers. In this situation, the relay agent does not start the timeout timer.

If the polling selection algorithm applies, the relay agent uses the following mechanism to determine whether a DHCPv6 server is available:

1. When receiving the first request, the DHCPv6 relay agent forwards that request to all available servers. At the same time, it starts the request counter and the timeout timer. The timeout timer is set to the highest timeout value among all servers.

2. The relay agent determines the availability of the DHCPv6 server:

¡ On receipt of a reply before the timeout timer expires, the relay agent takes one of the following actions depending on the reply content:

- If the reply contains a usable IPv6 address or prefix, the relay agent resets the request counter and stops the timeout timer.

- If the reply indicates an address or prefix assignment failure, the relay agent determines that the reply sender is unavailable and places it in down state. In this situation, the relay agent does not reset the request counter. It continues to wait for replies from other servers until a reply is received or until the timeout timer expires.

¡ If the relay agent has not received a reply from any servers when the timeout timer expires, the relay agent checks the request counter again the dead-count-value setting.

- If the number of requests does not exceed the dead-count-value setting, the relay agent continues to send new requests to all servers without resetting the request counter.

- If the number of requests exceeds the dead-count-value setting, the relay agent determines that none of the DHCPv6 servers is available and places them in down state.

3. When the relay agent receives a new request after it placed all the servers in down state, it forwards the new request to all the servers without restarting the timeout timer.

The relay agent starts the dead-time timer for a DHCPv6 server after it determines that the server is unavailable. The relay agent will not relay requests to that server until after the timer expires.

The liveness detection settings specific to a DHCPv6 server have a higher priority than the shared settings. If no DHCP server-specific settings are configured, the shared ones apply.

You can specify multiple server liveness detection rules for different DHCPv6 server addresses. If you do not specify a DHCPv6 server, you are creating a shared detection rule. The DHCP server-specific detection rule or the shared rule takes effect as follows:

· If you specify the same rule keyword but with different values in each command execution, the most recent configuration takes effect.

· If you specify different rule keywords in each command execution, all configurations take effect.

Examples

# Configure DHCPv6 server liveness detection for DHCPv6 server at 1::1. Set the maximum number of consecutive communication failures to 10, set the communication failure check timer to 20 seconds, and set the DHCPv6 server dead period to 3 minutes.

<Sysname> system-view

[Sysname] ipv6 dhcp remote-server 1::1 dead-count 10 timeout 20 dead-time 3

Related commands

display ipv6 dhcp relay remote-server-info

remote-server algorithm

ipv6 dhcp relay server-address

remote-server

Use remote-server to specify DHCPv6 servers for an IPv6 address pool.

Use undo remote-server to remove DHCPv6 servers from an IPv6 address pool.

Syntax

remote-server ipv6-address [ interface interface-type interface-number | public | vpn-instance vpn-instance-name ]

undo remote-server [ ipv6-address [ interface interface-type interface-number | public | vpn-instance vpn-instance-name ] ]

Default

No DHCPv6 server is specified for the IPv6 address pool.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies a DHCPv6 server address.

interface interface-type interface-number: Specifies the outgoing interface by its type and number for the DHCPv6 relay agent to forward packets to the DHCPv6 server. If you do not specify an outgoing interface, the DHCPv6 relay agent performs a routing table lookup.

public: Specifies this option if the specified DHCPv6 server is on the public network.

vpn-instance vpn-instance-name: Specifies the MPLS L3VPN instance to which the specified DHCPv6 server belongs. The vpn-instance-name argument is a case-sensitive string of 1 to 31 characters. If you do not specify an MPLS L3VPN instance, the specified DHCPv6 server is on the public network.

Usage guidelines

You can specify a maximum of eight DHCPv6 servers in one IPv6 address pool.

If you do not specify any parameters, the undo remote-server command removes all DHCPv6 servers in the IPv6 address pool.

If a DHCPv6 server address is a link-local address, you must specify an outgoing interface by using the interface keyword in this command. If you do not specify an outgoing interface, DHCPv6 packets might fail to reach the DHCPv6 server.

Examples

# Specify DHCPv6 server 10::1 for IPv6 address pool 0.

<Sysname> system-view

[Sysname] ipv6 pool 0

[Sysname-ipv6-pool-0] remote-server 10::1

Related commands

display ipv6 dhcp relay remote-server-info

ipv6 dhcp remote-server

remote-server algorithm

Use remote-server algorithm to specify the DHCPv6 server selection algorithm.

Use undo remote-server algorithm to restore the default.

Syntax

remote-server algorithm { master-backup | polling }

undo remote-server algorithm

Default

The polling algorithm is used. The DHCPv6 relay agent forwards DHCPv6 requests to all DHCPv6 servers at the same time.

Views

IPv6 address pool view

Predefined user roles

network-admin

Parameters

polling: Forwards DHCPv6 requests to all DHCPv6 servers at the same time.

Usage guidelines

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify master-backup as the DHCPv6 server selection algorithm in IPv6 address pool 0.

<Sysname> system-view

[Sysname] ipv6 pool 0

[Sysname-ipv6-pool-0] remote-server algorithm master-backup

Related commands

display ipv6 dhcp relay remote-server-info

ipv6 dhcp remote-server

ipv6 dhcp relay server-address

remote-server

reset ipv6 dhcp relay client-information address

Use reset ipv6 dhcp relay client-information address to clear DHCPv6 relay entries that record clients' IPv6 address information.

Syntax

reset ipv6 dhcp relay client-information address [ interface interface-type interface-number | ipv6 ipv6-address ] [ vpn-instance vpn-instance-name ]

Views

User view

Predefined user roles

network-admin

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command clears DHCPv6 relay entries that record clients' IPv6 address information on all interfaces enabled with DHCPv6 relay agent.

ipv6 ipv6-address: Specifies an IPv6 address. If you do not specify an IPv6 address, this command clears DHCPv6 relay entries for all IPv6 addresses.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears DHCPv6 relay entries that record clients' IPv6 address information for the public network.

Usage guidelines

To enable the DHCPv6 relay agent to send a Release message to the DHCPv6 server after it deletes a DHCPv6 relay entry, execute the ipv6 dhcp relay release-agent command.

Examples

# Clear all DHCPv6 relay entries that record clients' IPv6 address information.

<Sysname> reset ipv6 dhcp relay client-information address

Related commands

display ipv6 dhcp relay client-information address

ipv6 dhcp relay client-information record

reset ipv6 dhcp relay client-information pd

Use reset ipv6 dhcp relay client-information pd to clear DHCPv6 relay entries that record clients' IPv6 prefix information.

Syntax

reset ipv6 dhcp relay client-information pd [ interface interface-type interface-number | prefix prefix/prefix-len ] [ vpn-instance vpn-instance-name ]

Views

User view

Predefined user roles

network-admin

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command clears DHCPv6 relay entries that record clients' IPv6 prefix information on all interfaces enabled with DHCPv6 relay agent.

prefix prefix/prefix-len: Specifies an IPv6 prefix with its length. The value range for the prefix-len argument is 1 to 128. If you do not specify an IPv6 prefix, this command clears DHCPv6 relay entries for all IPv6 prefixes.

vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears DHCPv6 relay entries that record clients' IPv6 prefix information for the public network.

Examples

# Clear all DHCPv6 relay entries that record clients' IPv6 prefix information.

<Sysname> reset ipv6 dhcp relay client-information pd

Related commands

display ipv6 dhcp relay client-information pd

ipv6 dhcp relay client-information record

reset ipv6 dhcp relay packet statistics

Use reset ipv6 dhcp relay packet statistics to clear packet statistics on the DHCPv6 relay agent.

Syntax

reset ipv6 dhcp relay packet statistics [ interface interface-type interface-number ]

Views

User view

Predefined user roles

network-admin

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command clears packet statistics on all DHCPv6 relay agents.

Examples

# Clear DHCPv6 relay agent packet statistics.

<Sysname> reset ipv6 dhcp relay packet statistics

Related commands

display dhcp relay packet statistics

DHCPv6 client commands

display ipv6 dhcp client

Use display ipv6 dhcp client to display DHCPv6 client information.

Syntax

display ipv6 dhcp client [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays information about all DHCPv6 clients.

Examples

# Display the DHCPv6 client information on Ten-GigabitEthernet 3/0/1.

<Sysname> display ipv6 dhcp client interface ten-gigabitethernet 3/0/1

Ten-GigabitEthernet3/0/1:

Type: Stateful client requesting address and prefix

State: OPEN

Client DUID: 0003000100e002000000

Preferred server

Reachable via address: FE80::2E0:1FF:FE00:18

Server DUID: 0003000100e001000000

IA_NA: IAID 0x00000642, T1 50 sec, T2 80 sec

Address: 1:1::2/128

Preferred lifetime 100 sec, valid lifetime 200 sec

Will expire on Feb 4 2014 at 15:37:20(288 seconds left)

IA_PD: IAID 0x00000642, T1 50 sec, T2 80 sec

Prefix: 12:34::/48

Preferred lifetime 100 sec, valid lifetime 200 sec

Will expire on Mar 27 2014 at 08:13:24 (199 seconds left)

DNS server addresses:

2:2::3

Domain name:

aaa.com

SIP server addresses:

2:2::4

SIP server domain names:

bbb.com

Options:

Code: 88

Length: 3 bytes

Hex: AABBCC

Table 31 Command output

Field	Description
Type	Types of DHCPv6 client: · Stateful client requesting address—A DHCPv6 client that requests an IPv6 address. · Stateful client requesting prefix—A DHCPv6 client that requests an IPv6 prefix. · Stateful client requesting address and prefix—A DHCPv6 client that requests an IPv6 address and prefix. · Stateless client—A DHCPv6 client that requests configuration parameters other than an IPv6 address and prefix through stateless DHCPv6.
State	Current state of the DHCPv6 client: · IDLE—The client is in idle state. · SOLICIT—The client is locating a DHCPv6 server. · REQUEST—The client is requesting an IPv6 address or prefix. · OPEN—The client has obtained an IPv6 address or prefix. · RENEW—The client is extending the lease (after T1 and before T2). · REBIND—The client is extending the lease (after T2 and before the lease expires). · RELEASE—The client is releasing an IPv6 address or prefix. · DECLINE—The client is declining an IPv6 address or prefix because of an address or prefix conflict. · INFO-REQUESTING—The client is requesting configuration parameters through stateless DHCPv6.
Client DUID	DUID of the DHCPv6 client.
Preferred server	Information about the DHCPv6 server selected by the DHCPv6 client.
Reachable via address	Reachable address for the DHCPv6 client. It is the link local address of the DHCPv6 server or DHCPv6 relay agent.
Server DUID	DUID of the DHCPv6 server.
IA_NA	IA_NA information.
IA_PD	IA_PD information.
IAID	IA identifier.
T1	T1 value in seconds.
T2	T2 value in seconds.
Address	IPv6 address obtained. This field is displayed only when the DHCPv6 client type is Stateful client requesting address.
Prefix	IPv6 prefix obtained. This field is displayed only when the DHCPv6 client type is Stateful client requesting prefix.
Preferred lifetime	Preferred lifetime in seconds.
valid lifetime	Valid lifetime in seconds.
Will expire on Feb 4 2014 at 15:37:20 (288 seconds left)	Time when the lease expires and the remaining time of the lease. If the lease expires after the year 2100, this field displays Will expire after 2100.
DNS server addresses	IPv6 address of the DNS server.
Domain name	Domain name suffix.
SIP server addresses	IPv6 address of the SIP server.
SIP server domain names	Domain name of the SIP server.
Options	Self-defined options.
Code	Code of the self-defined option.
Length	Self-defined option length in bytes.
Hex	Self-defined option content represented by a hexadecimal number.

‌

Related commands

ipv6 address dhcp-alloc

ipv6 dhcp client duid

ipv6 dhcp client pd

display ipv6 dhcp client statistics

Use display ipv6 dhcp client statistics to display DHCPv6 client statistics.

Syntax

display ipv6 dhcp client statistics [ interface interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command displays statistics for all DHCPv6 clients.

Examples

# Display DHCPv6 client statistics on Ten-GigabitEthernet 3/0/1.

<Sysname> display ipv6 dhcp client statistics interface ten-gigabitethernet 3/0/1

Interface : Ten-GigabitEthernet3/0/1

Packets received : 1

Reply : 1

Advertise : 0

Reconfigure : 0

Invalid : 0

Packets sent : 5

Solicit : 0

Request : 0

Renew : 0

Rebind : 0

Information-request : 5

Release : 0

Decline : 0

Table 32 Command output

Field	Description
Interface	Interface that acts as the DHCPv6 client.
Packets Received	Number of received packets.
Reply	Number of received reply packets.
Advertise	Number of received advertise packets.
Reconfigure	Number of received reconfigure packets.
Invalid	Number of invalid packets.
Packets sent	Number of sent packets.
Solicit	Number of sent solicit packets.
Request	Number of sent request packets.
Renew	Number of sent renew packets.
Rebind	Number of sent rebind packets.
Information-request	Number of sent information request packets.
Release	Number of sent release packets.
Decline	Number of sent decline packets.

‌

Related commands

reset ipv6 dhcp client statistics

ipv6 address dhcp-alloc

Use ipv6 address dhcp-alloc to configure an interface to use DHCPv6 for IPv6 address acquisition.

Use undo ipv6 address dhcp-alloc to cancel an interface from using DHCPv6, and clear the obtained IPv6 address and other configuration parameters.

Syntax

ipv6 address dhcp-alloc [ option-group option-group-number | rapid-commit ] *

undo ipv6 address dhcp-alloc

Default

An interface does not use DHCPv6 for IPv6 address acquisition.

Views

Layer 3 Ethernet interface view

Layer 3 Ethernet subinterface view

Layer 3 aggregate interface view

Layer 3 aggregate subinterface view

VLAN interface view

Predefined user roles

network-admin

Parameters

option-group option-group-number: Enables the DHCPv6 client to create a dynamic DHCPv6 option group for saving the configuration parameters, and assigns an ID to the option group. The value range for the ID is 1 to 100. If you do not specify this option, the DHCPv6 client does not create any dynamic DHCPv6 option groups.

rapid-commit: Supports rapid address or prefix assignment.

Examples

# Configure Ten-GigabitEthernet 3/0/1 to use DHCPv6 for IPv6 address acquisition. Configure the DHCPv6 client to support rapid address assignment and create dynamic DHCPv6 option group 1 for the configuration parameters obtained.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 address dhcp-alloc rapid-commit option-group 1

Related commands

display ipv6 dhcp client

ipv6 dhcp client dscp

Use ipv6 dhcp client dscp to set the DSCP value for DHCPv6 packets sent by the DHCPv6 client.

Use undo ipv6 dhcp client dscp to restore the default.

Syntax

ipv6 dhcp client dscp dscp-value

undo ipv6 dhcp client dscp

Default

The DSCP value in DHCPv6 packets is 56.

Views

System view

Predefined user roles

network-admin

Parameters

dscp-value: Sets the DSCP value for DHCPv6 packets, in the range of 0 to 63.

Usage guidelines

The DSCP value is carried in the Traffic class field of a DHCPv6 packet. It specifies the priority level of the packet and affects the transmission priority of the packet. A bigger DSCP value represents a higher priority.

Examples

# Set the DSCP value to 30 for DHCPv6 packets sent by the DHCPv6 client.

<Sysname> system-view

[Sysname] ipv6 dhcp client dscp 30

ipv6 dhcp client duid

Use ipv6 dhcp client duid to configure the DHCPv6 client DUID for an interface.

Use undo ipv6 dhcp client duid to restore the default.

Syntax

ipv6 dhcp client duid { ascii ascii-string | hex hex-string | mac interface-type interface-number }

undo ipv6 dhcp client duid

Default

The interface uses the device bridge MAC address to generate its DHCPv6 client DUID.

Views

Layer 3 Ethernet interface view

Layer 3 Ethernet subinterface view

Layer 3 aggregate interface view

Layer 3 aggregate subinterface view

VLAN interface view

Predefined user roles

network-admin

Parameters

ascii ascii-string: Specifies a case-sensitive ASCII string of 1 to 130 characters as the DHCPv6 client DUID.

hex hex-string: Specifies a hexadecimal number of 2 to 260 characters as the DHCPv6 client DUID.

mac interface-type interface-number: Specifies the MAC address of the specified interface as the DHCPv6 client DUID. The interface-type interface-number option specifies an interface by its type and number.

Usage guidelines

A DHCPv6 client pads its DUID into the Option 1 of the DHCPv6 packet that it sends to the DHCPv6 server. The DHCPv6 server can assign specific IPv6 addresses or prefixes to DHCPv6 clients with specific DUIDs.

The DUID of a DHCPv6 client is the globally unique identifier of the client, so make sure the DUID that you configure is unique.

Examples

# Specify the MAC address of Ten-GigabitEthernet 3/0/2 as the DHCPv6 client DUID for Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp client duid mac ten-gigabitethernet 3/0/2

Related commands

display ipv6 dhcp client

ipv6 dhcp client pd

Use ipv6 dhcp client pd to configure an interface to use DHCPv6 for IPv6 prefix acquisition.

Use undo ipv6 dhcp client pd to cancel an interface from using DHCPv6, and clear the obtained IPv6 prefix and other configuration parameters.

Syntax

ipv6 dhcp client pd prefix-number [ option-group option-group-number | rapid-commit ]*

undo ipv6 dhcp client pd

Default

An interface does not use DHCPv6 for IPv6 prefix acquisition.

Views

Layer 3 Ethernet interface view

Layer 3 Ethernet subinterface view

Layer 3 aggregate interface view

Layer 3 aggregate subinterface view

VLAN interface view

Predefined user roles

network-admin

Parameters

prefix-number: Specifies an IPv6 prefix ID in the range of 1 to 1024. After obtaining an IPv6 prefix, the client assigns the ID to the IPv6 prefix.

rapid-commit: Supports rapid address or prefix assignment.

Examples

# Configure Ten-GigabitEthernet 3/0/1 to use DHCPv6 for IPv6 prefix acquisition. Specify IDs for the dynamic IPv6 prefix and dynamic DHCPv6 option group, and configure the client to support rapid prefix assignment.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp client pd 1 rapid-commit option-group 1

Related commands

display ipv6 dhcp client

ipv6 dhcp client stateful

Use ipv6 dhcp client stateful to configure an interface to use DHCPv6 for IPv6 address and prefix acquisition.

Use undo ipv6 dhcp client stateful to cancel an interface from using DHCPv6, and clear the obtained IPv6 address, prefix, and other configuration parameters.

Syntax

ipv6 dhcp client stateful prefix prefix-number [ option-group option-group-number | rapid-commit ] *

undo ipv6 dhcp client stateful

Default

An interface does not use DHCPv6 for IPv6 address and prefix acquisition.

Views

Layer 3 Ethernet interface view

Layer 3 Ethernet subinterface view

Layer 3 aggregate interface view

Layer 3 aggregate subinterface view

VLAN interface view

Predefined user roles

network-admin

Parameters

prefix prefix-number: Specifies an IPv6 prefix ID in the range of 1 to 1024. After obtaining an IPv6 prefix, the client assigns the ID to the IPv6 prefix.

rapid-commit: Supports rapid address and prefix assignment.

Usage guidelines

The ipv6 dhcp client stateful command takes effect if it is configured with the ipv6 address dhcp-alloc and ipv6 dhcp client pd commands on an interface. You must execute the undo ipv6 dhcp client stateful command to have the ipv6 address dhcp-alloc and ipv6 dhcp client pd commands take effect.

Examples

# Configure Ten-GigabitEthernet 3/0/1 to use DHCPv6 for IPv6 address and prefix acquisition. Specify IDs for the dynamic IPv6 prefix and dynamic DHCPv6 option group, and configure the client to support rapid address and prefix assignment.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp client stateful prefix 1 rapid-commit option-group 1

Related commands

ipv6 address dhcp-alloc

ipv6 dhcp client pd

ipv6 dhcp client stateless enable

Use ipv6 dhcp client stateless enable to enable stateless DHCPv6.

Use undo ipv6 dhcp client stateless enable to disable stateless DHCPv6.

Syntax

ipv6 dhcp client stateless enable

undo ipv6 dhcp client stateless enable

Default

Stateless DHCPv6 is disabled.

Views

Layer 3 Ethernet interface view

Layer 3 Ethernet subinterface view

Layer 3 aggregate interface view

Layer 3 aggregate subinterface view

VLAN interface view

Predefined user roles

network-admin

Usage guidelines

Stateless DHCPv6 enables the interface to send an Information-request message to the multicast address of all DHCPv6 servers and DHCPv6 relay agents for configuration parameters.

Examples

# Enable stateless DHCPv6 on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp client stateless enable

reset ipv6 dhcp client statistics

Use reset ipv6 dhcp client statistics to clear DHCPv6 client statistics.

Syntax

reset ipv6 dhcp client statistics [ interface interface-type interface-number ]

Views

User view

Predefined user roles

network-admin

Parameters

interface interface-type interface-number: Specifies an interface by its type and number. If you do not specify an interface, this command clears all DHCPv6 client statistics.

Examples

# Clear all DHCPv6 client statistics.

<Sysname> reset ipv6 dhcp client statistics

Related commands

display ipv6 dhcp client statistics

DHCPv6 snooping commands

DHCPv6 snooping works between the DHCPv6 client and the DHCPv6 server or between the DHCPv6 client and DHCPv6 the relay agent. DHCPv6 snooping does not work between the DHCPv6 server and the DHCPv6 relay agent.

display ipv6 dhcp snooping binding

Use display ipv6 dhcp snooping binding to display DHCPv6 snooping entries.

Syntax

display ipv6 dhcp snooping binding [ address ipv6-address [ vlan vlan-id ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

address ipv6-address: Displays the DHCPv6 snooping entry for the specified IPv6 address. If you do not specify an IPv6 address, this command displays DHCPv6 snooping entries for all IPv6 addresses.

vlan vlan-id: Specifies the ID of the VLAN where the IPv6 address resides. If you do not specify a VLAN, this command displays DHCPv6 snooping entries for the IPv6 address in all VLANs.

Examples

# Display all DHCPv6 snooping entries.

<Sysname> display ipv6 dhcp snooping binding

1 DHCPv6 snooping entries found.

IPv6 address MAC address Lease VLAN SVLAN Interface

================ ============== =========== ==== ===== ========================

2::1 00e0-fc00-0006 54 2 N/A Ten-GigabitEthernet3/0/1

Table 33 Command output

Field	Description
IPv6 Address	IPv6 address assigned to the DHCPv6 client.
MAC Address	MAC address of the DHCPv6 client.
Lease	Remaining lease duration in seconds.
VLAN	When both DHCPv6 snooping and QinQ are enabled or the DHCPv6 packet contains two VLAN tags, this field identifies the outer VLAN tag. Otherwise, it identifies the VLAN where the port connecting the DHCPv6 client resides.
SVLAN	When both DHCPv6 snooping and QinQ are enabled or the DHCPv6 packet contains two VLAN tags, this field identifies the inner VLAN tag. Otherwise, it displays N/A.
Interface	Port connecting to the DHCPv6 client.

‌

Related commands

ipv6 dhcp snooping binding record

reset ipv6 dhcp snooping binding

display ipv6 dhcp snooping binding database

Use display ipv6 dhcp snooping binding database to display information about DHCPv6 snooping entry auto backup.

Syntax

display ipv6 dhcp snooping binding database

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display information about DHCPv6 snooping entry auto backup.

<Sysname> display ipv6 dhcp snooping binding database

File name : database.dhcp

Username :

Password :

Update interval : 600 seconds

Latest write time : Feb 27 18:48:04 2012

Status : Last write succeeded.

Table 34 Command output

Field	Description
File name	Name of the DHCPv6 snooping entry backup file.
Username	Username for accessing the URL of the remote backup file.
Password	Password for accessing the URL of the remote backup file. This field displays ****** if a password is configured.
Update interval	Waiting time in seconds after a DHCPv6 snooping entry change for the DHCPv6 snooping device to update the backup file.
Latest write time	Time of the latest update.
Status	Update state: · Writing—The backup file is being updated. · Last write succeeded—The backup file was successfully updated. · Last write failed—The backup file failed to be updated.

‌

display ipv6 dhcp snooping packet statistics

Use display ipv6 dhcp snooping packet statistics to display DHCPv6 packet statistics for DHCPv6 snooping.

Syntax

display ipv6 dhcp snooping packet statistics [ slot slot-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command displays DHCPv6 packet statistics for the active MPU.

Examples

# Display DHCPv6 packet statistics for DHCPv6 snooping.

<Sysname> display ipv6 dhcp snooping packet statistics

DHCPv6 packets received : 100

DHCPv6 packets sent : 200

Invalid DHCPv6 packets dropped : 0

Related commands

reset ipv6 dhcp snooping packet statistics

display ipv6 dhcp snooping trust

Use display ipv6 dhcp snooping trust to display information about trusted ports.

Syntax

display ipv6 dhcp snooping trust

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display information about trusted ports.

<Sysname> display ipv6 dhcp snooping trust

DHCPv6 snooping is enabled.

Interface Trusted

========================= ============

Ten-GigabitEthernet3/0/1 Trusted

The output shows that DHCPv6 snooping is enabled and Ten-GigabitEthernet 3/0/1 is the trusted port.

Related commands

ipv6 dhcp snooping trust

ipv6 dhcp snooping binding database filename

Use ipv6 dhcp snooping binding database filename to configure the DHCPv6 snooping device to back up DHCPv6 snooping entries to a file.

Use undo ipv6 dhcp snooping binding database filename to disable the auto backup and remove the backup file.

Syntax

ipv6 dhcp snooping binding database filename { filename | url url [ username username [ password { cipher | simple } string ] ] }

undo ipv6 dhcp snooping binding database filename

Default

The DHCPv6 snooping device does not back up DHCPv6 snooping entries.

Views

System view

Predefined user roles

network-admin

Parameters

filename: Specifies the name of a local backup file. For information about the filename argument, see Fundamentals Configuration Guide.

url url: Specifies the URL of a remote backup file. The URL is a case-sensitive string of 1 to 255 characters. Do not include a username or password in the URL. The supported path format type varies by server.

username username: Specifies the username for accessing the URL of the remote backup file. The username is a case-sensitive string of 1 to 32 characters. Do not specify this option if a username is not required for accessing the URL.

cipher: Specifies a password in encrypted form.

simple: Specifies a password in plaintext form. For security purposes, the password specified in plaintext form will be stored in encrypted form.

Usage guidelines

This command automatically creates the file if you specify a nonexistent file.

With this command executed, the DHCPv6 snooping device backs up its snooping entries immediately and runs auto backup. The snooping device, by default, waits 300 seconds after a DHCPv6 snooping entry change to update the backup file. You can use the ipv6 dhcp snooping binding database update interval command to change the waiting time. If no DHCPv6 snooping entry changes, the backup file is not updated.

As a best practice, back up the DHCPv6 snooping entries to a remote file. If you use the local storage medium, the frequent erasing and writing might damage the medium and then cause the DHCPv6 snooping device malfunction.

When the file is on a remote device, follow these restrictions and guidelines to specify the URL, username, and password:

· If the file is on an FTP server, enter URL in the format of ftp://server address:port/file path, where the port number is optional.

· If the file is on a TFTP server, enter URL in the format of tftp://server address:port/file path, where the port number is optional.

· The username and password must be the same as those configured on the FTP server. If the server authenticates only the username, the password can be omitted.

· If the IP address of the server is an IPv6 address, enclose the address in a pair of brackets, for example, ftp://[1::1]/database.dhcp.

· You can also specify the DNS domain name for the server address field, for example, ftp://company/database.dhcp.

Examples

# Configure the DHCPv6 snooping device to back up DHCPv6 snooping entries to the file database.dhcp.

<Sysname> system-view

[Sysname] ipv6 dhcp snooping binding database filename database.dhcp

# Configure the DHCPv6 snooping device to back up DHCPv6 snooping entries to the file database.dhcp in the working directory of the FTP server at 1::1.

<Sysname> system-view

[Sysname] ipv6 dhcp snooping binding database filename url ftp://[1::1]/database.dhcp username 1 password simple 1

# Configure the DHCPv6 snooping device to back up DHCPv6 snooping entries to the file database.dhcp in the working directory of the TFTP server at 2::1.

<Sysname> system-view

[Sysname] ipv6 dhcp snooping binding database filename url tftp://[2::1]/database.dhcp

Related commands

ipv6 dhcp snooping binding database update interval

Use ipv6 dhcp snooping binding database update interval to set the waiting time for the DHCPv6 snooping device to update the backup file after a DHCPv6 snooping entry change.

Use undo ipv6 dhcp snooping binding database update interval to restore the default.

Syntax

ipv6 dhcp snooping binding database update interval interval

undo ipv6 dhcp snooping binding database update interval

Default

The DHCPv6 snooping device waits 300 seconds to update the backup file after a DHCPv6 snooping entry change. If no DHCPv6 snooping entry changes, the backup file is not updated.

Views

System view

Predefined user roles

network-admin

Parameters

interval: Sets the waiting time in seconds, in the range of 60 to 864000.

Usage guidelines

When a DHCPv6 snooping entry is learned, updated, or removed, the waiting period starts. The DHCPv6 snooping device updates the backup file when the waiting period is reached. All snooping entries changed during the period will be saved to the backup file.

The waiting time takes effect only after you configure the DHCPv6 snooping entry auto backup by using the ipv6 dhcp snooping binding database filename command.

Examples

# Set the waiting time to 600 seconds for the DHCPv6 snooping device to update the backup file.

<Sysname> system-view

[Sysname] ipv6 dhcp snooping binding database update interval 600

Related commands

ipv6 dhcp snooping binding database filename

ipv6 dhcp snooping binding database update now

Use ipv6 dhcp snooping binding database update now to manually save DHCPv6 snooping entries to the backup file.

Syntax

ipv6 dhcp snooping binding database update now

Views

System view

Predefined user roles

network-admin

Usage guidelines

Each time this command is executed, the DHCPv6 snooping entries are saved to the backup file.

This command takes effect only after you configure the DHCPv6 snooping entry auto backup by using the ipv6 dhcp snooping binding database filename command.

Examples

# Manually save DHCPv6 snooping entries to the backup file.

<Sysname> system-view

[Sysname] ipv6 dhcp snooping binding database update now

Related commands

ipv6 dhcp snooping binding database filename

ipv6 dhcp snooping binding record

Use ipv6 dhcp snooping binding record to enable recording of client information in DHCPv6 snooping entries.

Use undo ipv6 dhcp snooping binding record to disable the feature.

Syntax

ipv6 dhcp snooping binding record

undo ipv6 dhcp snooping binding record

Default

DHCPv6 snooping does not record client information.

Views

Layer 2 Ethernet interface/Layer 2 aggregate interface view

Predefined user roles

network-admin

Usage guidelines

This command enables DHCPv6 snooping on the port directly connected to the clients to record client information in DHCPv6 snooping entries.

Examples

# Enable recording of client information in DHCPv6 snooping entries on Ten-GigabitEthernet 3/0/1.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp snooping binding record

ipv6 dhcp snooping check request-message

Use ipv6 dhcp snooping check request-message to enable the DHCPv6-REQUEST check feature.

Use undo ipv6 dhcp snooping check request-message to disable the DHCPv6-REQUEST check feature.

Syntax

ipv6 dhcp snooping check request-message

undo ipv6 dhcp snooping check request-message

Default

The DHCPv6-REQUEST check feature is disabled.

Views

Layer 2 Ethernet interface/Layer 2 aggregate interface view

Predefined user roles

network-admin

Usage guidelines

Use the DHCPv6-REQUEST check feature to protect the DHCPv6 server against DHCPv6 client spoofing attacks. The feature enables the DHCPv6 snooping device to check every received DHCPv6-RENEW, DHCPv6-DECLINE, or DHCPv6-RELEASE message against DHCPv6 snooping entries.

· If any criterion in an entry is matched, the device compares the entry with the message information.

¡ If they are consistent, the device considers the message valid and forwards it to the DHCPv6 server.

¡ If they are different, the device considers the message forged and discards it.

· If no matching entry is found, the device forwards the message to the DHCPv6 server.

Examples

# Enable DHCPv6-REQUEST check.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp snooping check request-message

ipv6 dhcp snooping deny

Use ipv6 dhcp snooping deny to configure a port as DHCPv6 packet blocking port.

Use undo ipv6 dhcp snooping deny to restore the default.

Syntax

ipv6 dhcp snooping deny

undo ipv6 dhcp snooping deny

Default

A port does not block DHCPv6 requests.

Views

Layer 2 Ethernet interface view

Layer 2 aggregate interface view

Predefined user roles

network-admin

Usage guidelines

CAUTION:

To avoid IPv6 address and prefix acquisition failure, configure a port to block DHCPv6 packets only if no DHCPv6 clients are connected to it.

‌

To enable a port on the snooping device to drop all incoming DHCPv6 requests, configure that port as a DHCPv6 packet blocking port.

Examples

# Configure Ten-GigabitEthernet 3/0/1 as a DHCPv6 packet blocking port.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp snooping deny

ipv6 dhcp snooping enable

Use ipv6 dhcp snooping enable to enable DHCPv6 snooping.

Use undo ipv6 dhcp snooping enable to disable DHCPv6 snooping.

Syntax

ipv6 dhcp snooping enable

undo ipv6 dhcp snooping enable

Default

DHCPv6 snooping is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

The DHCPv6 snooping feature works together with trusted port configuration as follows:

· The device forwards DHCPV6 Request messages to the DHCPv6 server only on trusted ports. If no trusted port is configured, the device discards all DHCPV6 Request messages.

· The device discards DHCPv6 server responses received on untrusted ports.

This mechanism ensures that DHCPv6 clients obtain IPv6 addresses or prefixes from authorized DHCPv6 servers.

When DHCPv6 snooping is disabled, all ports on the device forward responses from DHCPv6 servers.

Examples

# Enable DHCPv6 snooping.

<Sysname> system-view

[Sysname] ipv6 dhcp snooping enable

ipv6 dhcp snooping log enable

Use ipv6 dhcp snooping log enable to enable DHCPv6 snooping logging.

Use undo ipv6 dhcp snooping log enable to disable DHCPv6 snooping logging.

Syntax

ipv6 dhcp snooping log enable

undo ipv6 dhcp snooping log enable

Default

DHCPv6 snooping logging is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

This command enables the DHCPv6 snooping device to generate DHCPv6 snooping logs and send them to the information center. For information about the log destination and output rule configuration in the information center, see Network Management and Monitoring Configuration Guide.

As a best practice, disable this feature if the log generation affects the device performance.

Examples

# Enable DHCPv6 snooping logging.

<Sysname> system-view

[Sysname] ipv6 dhcp snooping log enable

ipv6 dhcp snooping max-learning-num

Use ipv6 dhcp snooping max-learning-num to set the maximum number of DHCPv6 snooping entries for an interface to learn.

Use undo ipv6 dhcp snooping max-learning-num to restore the default.

Syntax

ipv6 dhcp snooping max-learning-num max-number

undo ipv6 dhcp snooping max-learning-num

Default

The number of DHCPv6 snooping entries for an interface to learn is not limited.

Views

Layer 2 Ethernet interface/Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

max-number: Sets the maximum number of DHCPv6 snooping entries for an interface to learn. The value range is 1 to 4294967295.

Usage guidelines

When an interface learns the maximum number of DHCPv6 snooping entries, the interface stops learning DHCPv6 snooping entries. This does not affect the operating of the DHCPv6 snooping feature.

Examples

# Configure the Layer 2 Ethernet interface Ten-GigabitEthernet 3/0/1 to learn a maximum of 10 DHCPv6 snooping entries.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp snooping max-learning-num 10

ipv6 dhcp snooping option interface-id enable

Use ipv6 dhcp snooping option interface-id enable to enable support for the interface-ID option (also called Option 18).

Use undo ipv6 dhcp snooping option interface-id enable to disable support for the interface-ID option.

Syntax

ipv6 dhcp snooping option interface-id enable

undo ipv6 dhcp snooping option interface-id enable

Default

Option 18 is not supported.

Views

Layer 2 Ethernet interface/Layer 2 aggregate interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only when DHCPv6 snooping is globally enabled.

Examples

# Enable support for Option 18.

<Sysname> system-view

[Sysname] ipv6 dhcp snooping enable

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp snooping option interface-id enable

Related commands

ipv6 dhcp snooping enable

ipv6 dhcp snooping option interface-id string

Use ipv6 dhcp snooping option interface-id string to specify the content as the interface ID for Option 18.

Use undo ipv6 dhcp snooping option interface-id string to restore the default.

Syntax

ipv6 dhcp snooping option interface-id [ vlan vlan-id ] string interface-id

undo ipv6 dhcp snooping option interface-id [ vlan vlan-id ] string

Default

The DHCPv6 snooping device uses its DUID as the content for Option 18.

Views

Layer 2 Ethernet interface/Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

vlan vlan-id: Pads the interface ID for packets received from the specified VLAN. If you do not specify a VLAN, the device pads the interface ID for packets received from the default VLAN.

interface-id: Specifies a string of 1 to 128 characters as the interface ID.

Examples

# Specify company001 as the interface ID.

<Sysname> system-view

[Sysname] ipv6 dhcp snooping enable

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp snooping option interface-id enable

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp snooping option interface-id string company001

Related commands

ipv6 dhcp snooping enable

ipv6 dhcp snooping option interface-id enable

ipv6 dhcp snooping option remote-id enable

Use ipv6 dhcp snooping option remote-id enable to enable support for the remote-ID option (also called Option 37).

Use undo ipv6 dhcp snooping option remote-id enable to disable support for the remote-ID option.

Syntax

ipv6 dhcp snooping option remote-id enable

undo ipv6 dhcp snooping option remote-id enable

Default

Option 37 is not supported.

Views

Layer 2 Ethernet interface/Layer 2 aggregate interface view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only when DHCPv6 snooping is globally enabled.

Examples

# Enable support for Option 37.

<Sysname> system-view

[Sysname] ipv6 dhcp snooping enable

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp snooping option remote-id enable

Related commands

ipv6 dhcp snooping enable

ipv6 dhcp snooping option remote-id string

Use ipv6 dhcp snooping option remote-id string to specify the content as the remote ID for Option 37.

Use undo ipv6 dhcp snooping option remote-id string to restore the default.

Syntax

ipv6 dhcp snooping option remote-id [ vlan vlan-id ] string remote-id

undo ipv6 dhcp snooping option remote-id [ vlan vlan-id ] string

Default

The DHCPv6 snooping device uses its DUID as the content for Option 37.

Views

Layer 2 Ethernet interface/Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

vlan vlan-id: Pads the remote ID for packets received from the specified VLAN. If you do not specify a VLAN, the device pads the remote ID for packets received from the default VLAN.

remote-id: Specifies the a string of 1 to 128 characters as the remote ID.

Examples

# Specify device001 as the remote ID.

<Sysname> system-view

[Sysname] ipv6 dhcp snooping enable

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp snooping option remote-id enable

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp snooping option remote-id string device001

Related commands

ipv6 dhcp snooping enable

ipv6 dhcp snooping option remote-id enable

ipv6 dhcp snooping trust

Use ipv6 dhcp snooping trust to configure a port as a trusted port.

Use undo ipv6 dhcp snooping trust to restore the default state of a port.

Syntax

ipv6 dhcp snooping trust

undo ipv6 dhcp snooping trust

Default

After you enable DHCPv6 snooping, all ports are untrusted.

Views

Layer 2 Ethernet interface view

Layer 2 aggregate interface view

Predefined user roles

network-admin

Usage guidelines

Specify the port facing the DHCPv6 server as trusted and specify the other ports as untrusted so DHCPv6 clients can obtain valid IP addresses.

Examples

# Specify Ten-GigabitEthernet 3/0/1 as a trusted port.

<Sysname> system-view

[Sysname] interface ten-gigabitethernet 3/0/1

[Sysname-Ten-GigabitEthernet3/0/1] ipv6 dhcp snooping trust

Related commands

display ipv6 dhcp snooping trust

reset ipv6 dhcp snooping binding

Use reset ipv6 dhcp snooping binding to clear DHCPv6 snooping entries.

Syntax

reset ipv6 dhcp snooping binding { all | address ipv6-address [ vlan vlan-id ] }

Views

User view

Predefined user roles

network-admin

Parameters

address ipv6-address: Clears the DHCPv6 snooping entry for the specified IPv6 address.

vlan vlan-id: Clears DHCPv6 snooping entries for the specified VLAN. If you do not specify a VLAN, this command clears DHCPv6 snooping entries for the default VLAN.

all: Clears all DHCPv6 snooping entries.

Usage guidelines

This command applies to all slots on a distributed device.

Examples

# Clear all DHCPv6 snooping entries.

<Sysname> reset ipv6 dhcp snooping binding all

Related commands

display ipv6 dhcp snooping binding

reset ipv6 dhcp snooping packet statistics

Use reset ipv6 dhcp snooping packet statistics to clear DHCPv6 packet statistics for DHCPv6 snooping.

Syntax

reset ipv6 dhcp snooping packet statistics [ slot slot-number ]

Views

User view

Predefined user roles

network-admin

Parameters

slot slot-number: Specifies a card by its slot number. If you do not specify a card, this command clears DHCPv6 packet statistics for the active MPU.

Examples

# Clear DHCPv6 packet statistics for DHCPv6 snooping.

<Sysname> reset ipv6 dhcp snooping packet statistics

Related commands

display ipv6 dhcp snooping packet statistics

15-BRAS Services Command Reference

DHCPv6 commands

reset ipv6 dhcp rate-limit

display ipv6 dhcp pool-group-usage

display ipv6 dhcp prefix-pool

display ipv6 dhcp server

display ipv6 dhcp server conflict

display ipv6 dhcp server expired-ip

display ipv6 dhcp server free-ip

ipv6 dhcp policy

reset dhcpv6-access packet statistics

reset ipv6 dhcp pool-usage peak

reset ipv6 dhcp server expired-ip

vpn-instance (IPv6 address pool group view)

remote-server

DHCPv6 client commands

display ipv6 dhcp client

DHCPv6 snooping commands