Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show dhcp-security ipv6 binding

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show dhcp-security ipv6 binding
<detail>
<interface interface-name>
<ipv6-address ipv6-address>
<vlan vlan-name>

Description

Display bindings between IPv6 addresses and MAC addresses (IP-MAC bindings) along with other DHCP lease information, also known as the DHCPv6 binding table or DHCPv6 snooping database.

Options

detail (Optional) Display the DHCPv6 snooping table along with various DHCP client options. The option information associated with a binding is displayed in Code-Length-Value triplet. The option values are displayed as a hex dump.
Note:

DHCP client options are displayed for DHCPv6 only when the snoop entry type is IA_NA.

interface interface-name

(Optional) Display the DHCPv6 snooping table for the specified interface.

ipv6-address ipv6-address

(Optional) Display the DHCPv6 snooping table for the specified IPv6 address.

vlan vlan-name

(Optional) Display the DHCPv6 snooping table for a VLAN.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show dhcp-security ipv6 binding command. Output fields are listed in the approximate order in which they appear.

The DHCPv6 binding table shows the untrusted access interfaces in VLANs that have been enabled for DHCPv6 snooping. The entries include the IPv6 addresses and MAC addresses that are bound to one another.

Table 1: show dhcp-security ipv6 binding Output Fields

Field Name

Field Description

Level of Output

IPv6 address

IPv6 addresses of the network device; bound to the MAC address. There are two entries added for each client: one with the link-local IPv6 address, which is used by the client for DHCP transactions, and another with the IPv6 address assigned by the server. The link-local address always has the prefix fe80::/10.

All levels

MAC address

MAC address of the network device; bound to the IPv6 address.

All levels

VLAN

VLAN name of the network device whose MAC address is shown.

All levels

Expires

The time, in seconds, remaining before the lease of the IPv6 address to the MAC address expires. This field is 0 for static entries.

All levels

State

Specifies whether the IPv6 address is:

  • BOUND: Temporarily leased to the MAC address for a limited period of time.

  • STATIC: Attached to a fixed MAC address.

All levels

Interface

Interface address (port).

All levels

Type

Shows the snoop entry type, whenever one is present. Snoop entry types can be one of the following:

  • IA_NA: The snoop entry related to the IA Address

  • IA_PD: The snoop entry related to the IA Prefix

  • Link-local: The snoop entry corresponding to the source address of the requesting client.

  • Static: The snoop entry created through configuration by a user or admin.

All levels

Sample Output

show dhcp-security ipv6 binding

content_copy zoom_out_map
user@switch> show dhcp-security ipv6 binding             
IPv6 address               MAC address         Vlan     Expires State   Interface             Type
fe80::210:94ff:fe00:7      00:10:94:00:00:07   vlan-iapd 86394  BOUND   ge-0/0/13.0           Link local
2002::e                    00:10:94:00:00:07   vlan-iapd 86394  BOUND   ge-0/0/13.0           IA-NA
2002::c                    00:10:94:00:00:02   vlan-iapd 0      STATIC  ge-0/0/13.0           Static
2000:1::5:0/112            00:10:94:00:00:07   vlan-iapd 86394  BOUND   ge-0/0/13.0           IA-PD

show dhcp-security ipv6 binding detail

content_copy zoom_out_map
user@device> show dhcp-security ipv6 binding detail

IPv6 Address: fe80::210:94ff:fe00:7 ​
MAC address: 00:10:94:00:00:02
Vlan: snoop-vlan ​
Lease Expires in: 91 ​
State: BOUND
Interface:  ge-0/0/13.0
Type: Link local ​

IPv6 Address: 2001:db8:fe16::/112
MAC address: 00:10:94:00:00:02
Vlan: snoop-vlan ​
Lease Expires in: 91 ​
State: BOUND
Interface:  ge-0/0/13.0
Type: IA-PD 

IPv6 Address: 2001:db8::10:10:2 ​
MAC address: 00:10:94:00:00:02
Vlan: snoop-vlan ​
Lease Expires in: 91 ​
State: BOUND ​
Interface:  ge-0/0/13.0​
Type: IA-NA ​
DHCP Client Options: ​
  Option: 1, Length: 14, Value: 00 01 00 01 64 35 42 89 00 10 94 00 00 02 ​
  Option: 2, Length: 26, Value: 00 02 00 00 05 83 34 34 3a 61 61 3a 35 30 
  3a 63 32 3a 63 33 3a 32 30 00 00 00 ​
  Option: 3, Length: 40, Value: 00 00 00 00 00 00 00 3c 00 00 00 60 00 05 
  00 18 20 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 00 78 00 00 00 78 ​

show dhcp-security ipv6 binding interface

content_copy zoom_out_map
user@switch> show dhcp-security ipv6 binding interface ge-0/0/4.0
IPv6 address             MAC address         Vlan     Expires State   Interface
2001:db8:fe16::          00:10:00:20:00:01   vlan20   0       STATIC  ge-0/0/4.0 
fe80::210:94ff:fe00:4    00:10:00:20:00:01   vlan20   0       STATIC  ge-0/0/4.0 

Release Information

Command introduced in Junos OS Release 13.2X51-D20.

detail option introduced in Junos OS Release 23.1.

footer-navigation