IPI-DHCP-SNOOPING
Configure options
Use this attribute to debug the DHCP snooping feature.
Attribute Name: options
Attribute Type: bits (event|rx|tx|packet|all)
Netconf edit-config payload
<dhcp xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<snooping>
<debug>
<config>
<options>event</options> <!-- operation="delete"-->
</config>
</debug>
</snooping>
</dhcp>
Command Syntax
debug ip dhcp snooping (event|rx|tx|packet|all)
Configure snooping enable
Enable DHCP snooping feature
Attribute Name: snooping-enable
Attribute Type: empty
Netconf edit-config payload
<dhcp xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<snooping>
<snooping-bridges>
<snooping-bridge>
<bridge-id>1</bridge-id>
<config>
<bridge-id>1</bridge-id>
</config>
</snooping-enable>
</snooping-bridge>
</snooping-bridges>
</snooping>
</dhcp>
Command Syntax
ip dhcp snooping bridge <1-32>
Configure verify mac address
Use this command to enable MAC address verification.
Attribute Name: verify-mac-address
Attribute Type: empty
Netconf edit-config payload
<dhcp xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<snooping>
<snooping-bridges>
<snooping-bridge>
<bridge-id>1</bridge-id>
<config>
<bridge-id>1</bridge-id>
</config>
</verify-mac-address><!-- operation="delete"-->
</snooping-bridge>
</snooping-bridges>
</snooping>
</dhcp>
Command Syntax
ip dhcp snooping verify mac-address bridge <1-32>
Configure option 82 enable
Use this command to insert interface and VLAN name in the option 82 field in DHCP packets.
Attribute Name: option-82-enable
Attribute Type: empty
Netconf edit-config payload
<dhcp xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<snooping>
<snooping-bridges>
<snooping-bridge>
<bridge-id>1</bridge-id>
<config>
<bridge-id>1</bridge-id>
</config>
</option-82-enable><!-- operation="delete"-->
</snooping-bridge>
</snooping-bridges>
</snooping>
</dhcp>
Command Syntax
ip dhcp snooping information option bridge <1-32>
Configure write delay
Configure DHCP snooping database write delay in multiples of 10 seconds
Attribute Name: write-delay
Attribute Type: uint32
Default Value: 300
Attribute Range: 20-86400
Netconf edit-config payload
<dhcp xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<snooping>
<snooping-bridges>
<snooping-bridge>
<bridge-id>1</bridge-id>
<config>
<bridge-id>1</bridge-id>
</config>
<write-delay>20</write-delay> <!-- operation="delete"-->
</snooping-bridge>
</snooping-bridges>
</snooping>
</dhcp>
Command Syntax
ip dhcp snooping database write-delay <20-86400> bridge <1-32>
Configure strict validation
Use this command to enable strict validation of DHCP packets.
Attribute Name: strict-validation
Attribute Type: empty
Netconf edit-config payload
<dhcp xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<snooping>
<snooping-bridges>
<snooping-bridge>
<bridge-id>1</bridge-id>
<config>
<bridge-id>1</bridge-id>
</config>
</strict-validation><!-- operation="delete"-->
</snooping-bridge>
</snooping-bridges>
</snooping>
</dhcp>
Command Syntax
ip dhcp packet strict-validation bridge <1-32>
Configure vlan range
Use this command to enable DHCP snooping for the given VLAN.
Attribute Name: vlan-range
Attribute Type: string
Attribute Range: 2-4094
Netconf edit-config payload
<dhcp xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<snooping>
<snooping-bridges>
<snooping-bridge>
<bridge-id>1</bridge-id>
<config>
<bridge-id>1</bridge-id>
</config>
<vlan-range>VLAN_RANGE</vlan-range> <!-- operation="delete"-->
</snooping-bridge>
</snooping-bridges>
</snooping>
</dhcp>
Command Syntax
ip dhcp snooping vlan VLAN_RANGE bridge <1-32>
Configure enable
Use this command to enable/disable arp-inspection on the bridge.
Attribute Name: enable
Attribute Type: empty
Netconf edit-config payload
<dhcp xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<snooping>
<snooping-bridges>
<snooping-bridge>
<bridge-id>1</bridge-id>
<config>
<bridge-id>1</bridge-id>
</config>
<config>
</enable>
</config>
</arp-inspection>
</snooping-bridge>
</snooping-bridges>
</snooping>
</dhcp>
Command Syntax
ip dhcp snooping arp-inspection bridge <1-32>
Configure validate
Use this command to enable validation of the source-mac, destination-mac, or IP address field in the ARP packet payload.
Attribute Name: validate
Attribute Type: enum (src-mac|dst-mac|ip)
Netconf edit-config payload
<dhcp xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<snooping>
<snooping-bridges>
<snooping-bridge>
<bridge-id>1</bridge-id>
<config>
<bridge-id>1</bridge-id>
</config>
<config>
<validate>src-mac</validate> <!-- operation="delete"-->
</config>
</arp-inspection>
</snooping-bridge>
</snooping-bridges>
</snooping>
</dhcp>
Command Syntax
ip dhcp snooping arp-inspection validate (src-mac|dst-mac|ip) bridge <1-32>
Configure bridge id
Use this command to enable ARP inspection on the VLAN in a bridge.
Attribute Name: vlan-range
Attribute Type: string
Attribute Range: 2-4094
Netconf edit-config payload
<dhcp xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<snooping>
<snooping-bridges>
<snooping-bridge>
<bridge-id>1</bridge-id>
<config>
<bridge-id>1</bridge-id>
</config>
<config>
<vlan-range>VLAN_RANGE</vlan-range> <!-- operation="delete"-->
</config>
</arp-inspection>
</snooping-bridge>
</snooping-bridges>
</snooping>
</dhcp>
Command Syntax
ip dhcp snooping arp-inspection vlan VLAN_RANGE bridge <1-32>
Configure if name
Use this attribute to set the interface name
Attribute Name: if-name
Attribute Type: string
Attribute Name: ipv4-address
Attribute Type: inet:ipv4-address
Netconf edit-config payload
<dhcp xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<snooping>
<snooping-bridges>
<snooping-bridge>
<bridge-id>1</bridge-id>
<config>
<bridge-id>1</bridge-id>
</config>
<vlans>
<vlan>
<vlan-id>1</vlan-id>
<config>
<vlan-id>1</vlan-id>
</config>
<mac-addresses-ipv4>
<mac-address-ipv4>
<mac-address>XXXX.XXXX.XXXX</mac-address>
<config>
<mac-address>XXXX.XXXX.XXXX</mac-address>
<ipv4-address>A.B.C.D</ipv4-address>
</config>
<if-name>IFNAME</if-name>
</mac-address-ipv4>
</mac-addresses-ipv4>
</vlan>
</vlans>
</snooping-bridge>
</snooping-bridges>
</snooping>
</dhcp>
Command Syntax
ip dhcp snooping binding bridge <1-32> XXXX.XXXX.XXXX <1-4094> ipv4 A.B.C.D IFNAME
Configure mac address
Use this attribute to set the interface name
This command is supported when following feature are enabled HAVE_IPV6 feature enabled
Attribute Name: if-name
Attribute Type: string
Attribute Name: ipv6-address
Attribute Type: inet:ipv6-address
Netconf edit-config payload
<dhcp xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<snooping>
<snooping-bridges>
<snooping-bridge>
<bridge-id>1</bridge-id>
<config>
<bridge-id>1</bridge-id>
</config>
<vlans>
<vlan>
<vlan-id>1</vlan-id>
<config>
<vlan-id>1</vlan-id>
</config>
<mac-addresses-ipv6>
<mac-address-ipv6>
<mac-address>XXXX.XXXX.XXXX</mac-address>
<config>
<mac-address>XXXX.XXXX.XXXX</mac-address>
<ipv6-address>X:X::X:X</ipv6-address>
</config>
<if-name>IFNAME</if-name>
</mac-address-ipv6>
</mac-addresses-ipv6>
</vlan>
</vlans>
</snooping-bridge>
</snooping-bridges>
</snooping>
</dhcp>
Command Syntax
ip dhcp snooping binding bridge <1-32> XXXX.XXXX.XXXX <1-4094> ipv6 X:X::X:X IFNAME
ip dhcp snooping database bridge WORD
Attribute Name: bridge-id
Attribute Type: string
Netconf RPC payload
<ipi-dhcp-snooping_dhcp-snooping-write-database xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<bridge-id>WORD</bridge-id>
</ipi-dhcp-snooping_dhcp-snooping-write-database>
Command Syntax
ip dhcp snooping database bridge WORD
renew ip dhcp snooping binding database bridge WORD
Attribute Name: bridge-id
Attribute Type: string
Netconf RPC payload
<ipi-dhcp-snooping_dhcp-snooping-renew-database xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<bridge-id>WORD</bridge-id>
</ipi-dhcp-snooping_dhcp-snooping-renew-database>
Command Syntax
renew ip dhcp snooping binding database bridge WORD
ip dhcp snooping source database bridge WORD
Attribute Name: bridge-id
Attribute Type: string
Netconf RPC payload
<ipi-dhcp-snooping_dhcp-snooping-write-source-binding-database xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<bridge-id>WORD</bridge-id>
</ipi-dhcp-snooping_dhcp-snooping-write-source-binding-database>
Command Syntax
ip dhcp snooping source database bridge WORD
renew ip dhcp snooping source binding database bridge WORD
Attribute Name: bridge-id
Attribute Type: string
Netconf RPC payload
<ipi-dhcp-snooping_dhcp-snooping-renew-source-database xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<bridge-id>WORD</bridge-id>
</ipi-dhcp-snooping_dhcp-snooping-renew-source-database>
Command Syntax
renew ip dhcp snooping source binding database bridge WORD
clear ip dhcp snooping source binding bridge WORD
Attribute Name: bridge-id
Attribute Type: string
Netconf RPC payload
<ipi-dhcp-snooping_dhcp-snooping-clear-source-binding-database xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<bridge-id>WORD</bridge-id>
</ipi-dhcp-snooping_dhcp-snooping-clear-source-binding-database>
Command Syntax
clear ip dhcp snooping source binding bridge WORD
clear ip dhcp snooping binding bridge WORD
Attribute Name: bridge-id
Attribute Type: string
Netconf RPC payload
<ipi-dhcp-snooping_dhcp-snooping-clear-database xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<bridge-id>WORD</bridge-id>
</ipi-dhcp-snooping_dhcp-snooping-clear-database>
Command Syntax
clear ip dhcp snooping binding bridge WORD
debug ip dhcp snooping (event|rx|tx|packet|all)
Attribute Name: terminal-debug-options
Attribute Type: bits (event|rx|tx|packet|all)
Netconf RPC payload
<ipi-dhcp-snooping_dhcp-snooping-terminal-debug-on xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<terminal-debug-options>event</terminal-debug-options>
</ipi-dhcp-snooping_dhcp-snooping-terminal-debug-on>
Command Syntax
debug ip dhcp snooping (event|rx|tx|packet|all)
no debug ip dhcp snooping (event|rx|tx|packet|all)
Attribute Name: terminal-debug-options
Attribute Type: bits (event|rx|tx|packet|all)
Netconf RPC payload
<ipi-dhcp-snooping_dhcp-snooping-terminal-debug-off xmlns="http://www.ipinfusion.com/yang/ocnos/ipi-dhcp">
<terminal-debug-options>event</terminal-debug-options>
</ipi-dhcp-snooping_dhcp-snooping-terminal-debug-off>
Command Syntax
no debug ip dhcp snooping (event|rx|tx|packet|all)