PLANET WGSW-52040 - Manual (Page 285)

packets of server, option 37 and option 38 are meaningless and are peeled from the respond
packets. Therefore, the application of option 37 and option 38 is transparent for client.
DHCPv6 server can authenticate identity of DHCPv6 client and DHCPv6 relay device by
option 37 and option 38, assign and manage client address neatly through configuring the
assign policy, prevent DHCPv6 attack availably according to the inclusive client information,
such as forging MAC address fields of DHCPv6 packets to trigger IP address exhaust attack.
Since server can identify multiple request packets from the same access port, it can assign the
address number through policy limit to avoid address exhaust. However, rfc4649 and rfc4580
do not set how to use opton 37 and option 38 for DHCPv6 server, users can use it neatly
according to their own demand.
35.2 DHCPv6 Options 37, 38 Configuration Task List
1. Dhcpv6 snooping option basic functions configuration
2. Dhcpv6 relay option basic functions configuration
3. Dhcpv6 server option basic functions configuration
1.DHCPv6 snooping option basic functions configuration
Command Description
Global mode
ipv6 dhcp snooping remote-id option
no ipv6 dhcp snooping remote-id option
This command enables
DHCPv6 SNOOPING to
support option 37 option, no
command disables it.
ipv6 dhcp snooping subscriber-id option
no ipv6 dhcp snooping subscriber-id option
This command enables
DHCPv6 SNOOPING to
support option 38 option, no
command disables it.
ipv6 dhcp snooping remote-id policy {drop | keep |
replace}
no ipv6 dhcp snooping remote-id policy
This command is used to
configure the reforward policy
of the system when receiving
DHCPv6 packets with option
37, which can be:
drop, the system simply
discards it with option 37;
35-64