How can the CPU be protected from DHCPv6 messages

Run the display cpu-defend statistics command to check the statistics on CPCAR packets. If a large number of DHCPv6 messages are discarded, check whether IPv6 is required. If IPv6 is not required, configure an attack defense policy to directly discard DHCPv6 messages.

Run the undo dhcp snooping enable ipv6 command to disable DHCPv6 snooping on the switch in V200R001 and later versions.

Scroll to top