Worldwide [change] |Account |Register |About Cisco
Guest

Hierarchical Navigation

Cisco IOS and NX-OS Software

DHCP Option 82 Configurable Circuit ID and Remote ID

Downloads

Table Of Contents

DHCP Option 82 Configurable Circuit ID and Remote ID

Finding Feature Information

Contents

Restrictions for DHCP Option 82 Configurable Circuit ID and Remote ID

Information About DHCP Option 82 Configurable Circuit ID and Remote ID

How to Configure DHCP Option 82 Configurable Circuit ID and Remote ID

Configuring DHCP Snooping on Private VLANs

Configuration Example for DHCP Option 82 Configurable Circuit ID and Remote ID

Mapping Private-VLAN Associations: Example

Additional References

Related Documents

Standards

MIBs

RFCs

Technical Assistance

Command Reference

Feature Information for DHCP Option 82 Configurable Circuit ID and Remote ID


DHCP Option 82 Configurable Circuit ID and Remote ID

First Published: February 26, 2009
Last Updated: February 26, 2009

The Cisco DHCP Option 82 Configurable Circuit ID and Remote ID provides more naming choices in the Option 82 Remote ID and Option 82 Circuit ID suboptions. For example, you can use a switch-configured hostname or specify an ASCII text string for the remote ID, and you can configure an ASCII text string to override the circuit ID.

Note Refer to the configuration guide for your platform for information about configuring Dynamic Host Configuration Protocol (DHCP). See the "Configuring DHCP Snooping" section of the Cisco 7600 Series Cisco IOS Software Configuration Guide, Release 12.2SR, for information about configuring DHCP on Cisco 7600 series routers. See the "Related Documents" section for sources of information about configuring DHCP on other Cisco platforms.

Finding Feature Information

For the latest feature information and caveats, see the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the "Feature Information for DHCP Option 82 Configurable Circuit ID and Remote ID" section.

Use Cisco Feature Navigator to find information about platform support and Cisco IOS and Catalyst OS software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.

Contents

•Restrictions for DHCP Option 82 Configurable Circuit ID and Remote ID

•Information About DHCP Option 82 Configurable Circuit ID and Remote ID

•How to Configure DHCP Option 82 Configurable Circuit ID and Remote ID

•Configuration Example for DHCP Option 82 Configurable Circuit ID and Remote ID

•Additional References

•Command Reference

•Feature Information for DHCP Option 82 Configurable Circuit ID and Remote ID

Restrictions for DHCP Option 82 Configurable Circuit ID and Remote ID

When DHCP snooping is configured on a primary VLAN, you cannot configure snooping with different settings on any of its secondary VLANs. You must configure DHCP snooping for all associated VLANs on the primary VLAN. If DHCP snooping is not configured on the primary VLAN and you try to configure it on the secondary VLAN, for example, VLAN 200, this message appears: 

2w5d:%DHCP_SNOOPING-4-DHCP_SNOOPING_PVLAN_WARNING:DHCP Snooping configuration may not 
take effect on secondary vlan 200. DHCP Snooping configuration on secondary vlan is 
derived from its primary vlan.

You can use the show ip dhcp snooping command to display all VLANs, both primary and secondary, that have DHCP snooping enabled.

Information About DHCP Option 82 Configurable Circuit ID and Remote ID

The DHCP Option 82 Configurable Circuit ID and Remote ID feature enhances validation security by allowing you to determine what information is provided in the Option 82 Remote ID and Option 82 Circuit ID suboptions.

You can enable DHCP snooping on private VLANs. When DHCP snooping is enabled, the configuration is propagated to both a primary VLAN and its associated secondary VLANs. When DHCP snooping is enabled on a primary VLAN, it is also enabled on its secondary VLANs.

See the "DHCP Snooping Option-82 Data Insertion" section of the Cisco 7600 Series Cisco IOS Software Configuration Guide for information about using DHCP to centrally manage the IP address assignments for a large number of subscribers in residential, metropolitan Ethernet-access environments.

Figure 1 shows the packet format used when DHCP snooping is globally enabled and the ip dhcp snooping information option global configuration command is entered with the Circuit ID suboption.

Figure 1 Suboption Packet Formats, Circuit ID Specified

Figure 2 shows the packet format used when DHCP snooping is globally enabled and the ip dhcp snooping information option global configuration command is entered with the Remote ID suboption.

Figure 2 Suboption Packet Formats, Remote ID Specified

How to Configure DHCP Option 82 Configurable Circuit ID and Remote ID

This section contains the following task:

•Configuring DHCP Snooping on Private VLANs

Configuring DHCP Snooping on Private VLANs

Perform these tasks to configure DHCP snooping on private primary and secondary VLANs:

•Configure a private, primary VLAN.

•Associate with it an isolated VLAN.

•Create an SVI interface for the primary VLAN, and associate it with the appropriate loopback IP and helper address.

•Enable DHCP snooping on the primary VLAN, which also enables it on the associated VLAN.

Note You must also configure a server to assign the IP address, a DHCP pool, and a relay route so that snooping can be effective.

SUMMARY STEPS

1. enable

2. configure terminal

3. vlan vlan-id

4. private-vlan primary

5. private-vlan association associated-vlan-list

6. configure terminal

7. vlan vlan-id

8. private-vlan isolated

9. configure terminal

10. interface vlan primary-vlan-id

11. ip unnumbered loopback

12. private-vlan mapping [secondary-vlan-list | add secondary-vlan-list | remove secondary-vlan-list]

13. configure terminal

14. ip dhcp snooping vlan primary-vlan-id

DETAILED STEPS

 
Command or Action
Purpose

Step 1 

enable

Example:

Router> enable

Enables privileged EXEC mode.

•Enter your password if prompted.

Step 2 

configure terminal

Example:

Router# configure terminal

Enters global configuration mode.

Step 3 

vlan vlan-id

Example:

Router(config)# vlan 70

Enters VLAN configuration submode for the named private VLAN.

Step 4 

private-vlan primary

Example:

Router(config-vlan)# private-vlan primary

Designates the VLAN as the primary private VLAN.

Step 5 

private-vlan association secondary-vlan-list

Example:

Router(config-vlan)# private-vlan association 7

Configures private VLANs (PVLANs) and the association between a PVLAN and a secondary VLAN.

Step 6 

configure terminal

Example:

Router# configure terminal

Enters global configuration mode.

Step 7 

vlan vlan_ID

Example:

Router(config)# vlan 7

Enters VLAN configuration mode for the named private VLAN.

•In this example, the associated secondary VLAN, vlan 7.

Step 8 

private-vlan isolated

Example:

Router(config-vlan)# private-vlan isolated

Designates the VLAN as an isolated private VLAN.

Step 9 

configure terminal

Example:

Router# configure terminal

Enters global configuration mode.

Step 10 

interface vlan primary-vlan_id

Example:

Router(config)# interface vlan 70

Creates a dynamic Switch Virtual Interface (SVI) on the primary VLAN.

Step 11 

ip unnumbered loopback

Example:

Router(config)# ip unnumbered loopback1

Specifies IP unnumbered loopback.

Step 12 

private-vlan mapping [secondary-vlan-list | add secondary-vlan-list | remove secondary-vlan-list]

Example:

Router(config-vlan)# private-vlan mapping 7

Creates a mapping between the primary and the secondary VLANs so that they share the same primary VLAN SVI.

Step 13 

configure terminal

Example:

Router# configure terminal

Enters global configuration mode.

Step 14 

ip dhcp snooping vlan primary-vlan_id

Example:

Router(config)# ip dhcp snooping vlan 70

Enables DHCP snooping on the primary and associated VLANs.

Configuration Example for DHCP Option 82 Configurable Circuit ID and Remote ID

This section provides the following configuration example:

•Mapping Private-VLAN Associations: Example

Mapping Private-VLAN Associations: Example

The following interface configuration example shows how to map the private-VLAN associations. The user-configurable circuit ID "aabb11" is inserted on the secondary VLAN, vlan 7. 

interface GigabitEthernet9/0/1

switchport

switchport private-vlan host-association 70 7

switchport mode private-vlan host

no mls qos trust

spanning-tree portfast

ip dhcp snooping vlan 7 information option format-type circuit-id string aabb11

The following example shows how to define a DHCP class "C1" and specify the hex string of the corresponding class at the server by using the hex string that matches the circuit-ID value entered in the interface configuration example. That is, the hex string 00000000000000000000000000000006616162623131 mask fffffffffffffffffffffffffffffff0000000000000 matches the circuit ID aabb11. 

ip dhcp class C1

relay agent information

relay-information hex 00000000000000000000000000000006616162623131 mask 
fffffffffffffffffffffffffffffff0000000000000

Additional References

The following sections provide references related to the DHCP Option 82 Configurable Circuit ID and Remote ID feature.

Related Documents

Related Topic
Document Title

Configuring DHCP on the Cisco 7600 series router

"Configuring DHCP Snooping" section of the Cisco 7600 Series Cisco IOS Software Configuration Guide

Configuring DHCP on the Cisco Catalyst 3550 multilayer switch

"Configuring DHCP Features" section of the Catalyst 3550 Multilayer Switch Software Configuration Guide

Configuring DHCP on the Cisco Catalyst 2970 switch

"Configuring DHCP Features" section of the Catalyst 2970 Switch Software Configuration Guide

Configuring DHCP on the Cisco Catalyst 3560 switch

"Configuring DHCP Features and IP Source Guard" section of the Catalyst 3560 Switch Software Configuration Guide

Configuring DHCP on the Cisco Catalyst 3750 switch

"Configuring DHCP Features and IP Source Guard" section of the Catalyst 3750 Switch Software Configuration Guide

DHCP commands: complete command syntax, command mode command history, defaults, usage guidelines, and examples

Cisco IOS IP Addressing Services Command Reference


Standards

Standard
Title

No new or modified standards are supported by this feature, and support for existing standards has not been modified by this feature.

—


MIBs

MIB
MIBs Link

•

To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL:

http://www.cisco.com/go/mibs


RFCs

RFC
Title

No new or modified RFCs are supported by this feature, and support for existing RFCs has not been modified by this feature.

—


Technical Assistance

Description
Link

The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies.

To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds.

Access to most tools on the Cisco Support website requires a Cisco.com user ID and password.

http://www.cisco.com/techsupport


Command Reference

The following commands are introduced or modified in the feature or features documented in this module. For information about these commands, see the Cisco IOS IP Addressing Services Command Reference at http://www.cisco.com/en/US/docs/ios/ipaddr/command/reference/
iad_book.html. For information about all Cisco IOS commands, use the Command Lookup Tool at http://tools.cisco.com/Support/CLILookup or the Cisco IOS Master Command List, All Releases, at http://www.cisco.com/en/US/docs/ios/mcl/allreleasemcl/all_book.html.

•ip dhcp snooping vlan

Feature Information for DHCP Option 82 Configurable Circuit ID and Remote ID

Table 1 lists the release history for this feature.

Not all commands may be available in your Cisco IOS software release. For release information about a specific command, see the command reference documentation.

Use Cisco Feature Navigator to find information about platform support and software image support. Cisco Feature Navigator enables you to determine which Cisco IOS and Catalyst OS software images support a specific software release, feature set, or platform. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.

Note Table 1 lists only the Cisco IOS software release that introduced support for a given feature in a given Cisco IOS software release train. Unless noted otherwise, subsequent releases of that Cisco IOS software release train also support that feature.

Table 1 Feature Information for DHCP Option 82 Configurable Circuit ID and Remote ID

Feature Name
Releases
Feature Information

DHCP Option 82 Configurable Circuit ID and Remote ID

12.2(33)SRD1

Provides naming choices in the Option 82 Remote ID and Option 82 Circuit ID suboptions.

The following commands were introduced or modified: ip dhcp snooping vlan.


CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0812R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.

© 2009 Cisco Systems, Inc. All rights reserved.