Configuring DHCPv6 Snooping for Multi-VRF

DHCPv6 snooping supports Multi-VRF. You can deploy multiple Virtual Routing and Forwarding instances (VRFs) on a RUCKUS Ethernet switch. Each VLAN with a Virtual Ethernet (VE) interface is assigned to a VRF.

You can enable DHCPv6 snooping on individual VLANs and assign any interface as the DHCPv6 trust interface. If an interface is a tagged port in this VLAN, you can turn on the trust port per VRF, so that traffic intended for other VRF VLANs is not trusted.

Enter global configuration mode by issuing the configure terminal command.
```
device# configure terminal
```

Configure DHCPv6 snooping on a specific VLAN.
```
device(config)# ipv6 dhcp6 snooping vlan 2
```

Set the port as a trusted port.
```
device(config)# interface ethernet 1/1/4
device(config-if-e10000-1/1/4)# dhcp6 snooping trust vrf red
```
The trust port setting for DHCPv6 snooping can be specified per VRF.

Configure the DHCPv6 relay agent on the VE interface if the client and server are not in the same VLAN.
```
device(config-vif-23)# ipv6 dhcp-relay destination 2001:100::2
```

To clear a DHCPv6 binding database of a specific Multi-VRF, enter the following command.
```
device(config)# clear ipv6 dhcp6 snooping vrf vrf2 
```

To clear a specific DHCPv6 binding belonging to a specific IPv6 address and VRF, enter the following command.
```
device# clear ipv6 dhcp6 snooping 2001::2 vrf vrf2
```

To clear default VRF DHCPv6 snooping entries, enter the following command.
```
device# clear ipv6 dhcp6 snooping vrf default
```

RUCKUS FastIron DHCP Configuration Guide, 09.0.10 53-1005720-17

Configuring DHCPv6 Snooping for Multi-VRF