ALE DHCP Snooping Troubleshooting

1 Introduction
This document provides information on the DHCP debugs for 6X AOS code release

2 Commands
2.1 DHCP Debug Mechanism
DHCP Debugs can be enabled for a

• MAC address and VLAN

• Port and VLAN

The above gives flexibility to debug the clients that have trouble with getting an IP address.

The Steps involved are

1. Enable DHCP Debug

2. Provide the MAC address or Port for which the Debugs have to be enabled
3. Additionally enable Packet Dump Status
4. Show the Debug Output for DHCP

The Maximum number of Log lines is limited to 600 lines. With each line limited to 160 characters.

2.2 MAC Based DHCP Debugs

Listed below are steps to enable DHCP snooping debugs

-> debug dhcp admin-status enable

-> debug dhcp mac-address 11:22:33:44:55:66 vlan 100
-> debug dhcp dump-packet admin-status enable
-> debug show dhcp
Debug Configurations:
------------------------------------------------------
DHCP Debug : Enabled
DHCP Packet Dump : Enabled
Debugging on : MAC: 11:22:33:44:55:66
Debugging on VLAN : 100
DHCP Snooping Status : Switch Level Enabled
Date Time Log Message
---------+----------+----------------------------------------------------------------------------
--
12/18/00 22:18:39 In enqueue_to_ip_using_ipc:2847: DHCP Discovery: Received in
DHCP Application:Port:1/47, Mac:11:22:33:44:55:66 VLAN:100
12/18/00 22:18:39 In enqueue_to_ip_using_ipc:2847: DHCP Packet Dump:
ff ff ff ff ff e8 e7 32 76 85 a4 81 00 00 64 08 00 45 00 01 48 00 00 00
00 40 11 f2 e0 c3 c3 c3 01 ff ff ff ff 00 43 00 44 01 34 6f 5d 02 01 06
00 00 00 00 00 00 00 00 00 00 00 00 00 c3 c3 c3 0a c3 c3 c3 01 00 00 00
00 e8 e7 32 1f 1d 9e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00
1/18/15 2:12:40 In udprelayProcessDHCPSnooping:6008: DHCP Discovery: Processing
Successfull: Port:1/47, Mac: 11:22:33:44:55:66 VLAN: 100
1/18/15 2:12:40 In udprelayProcessDHCPSnoopingInRequest:6533: DHCP Discovery
Received From: Port 1/47 Mac: 11:22:33:44:55:66 VLAN: 100.

2.3 Port Based DHCP Debugs

2.3.1 No Trust Port Case with Packet Dump

-> debug dhcp admin-status enable

-> debug dhcp port 1/5 vlan 128
-> debug dhcp dump-packet admin-status enable
-> debug show dhcp
-> debug show dhcp

Debug Configurations:
------------------------------------------------------
DHCP Debug : Enabled,
DHCP Packet Dump : Enabled,
Debugging on : Port: 1/5,
Debugging on VLAN : 128,
DHCP Snooping Status : Switch Level Enabled

Date Time Log Message

--------+--------+--------------------------------------------------------------
03/31/01 07:21:16 In enqueue_to_ip_using_ipc:2921: DHCP Request : Received in DHCP Application:
Port: 1/5, Mac: 0:c:29:f9:d6:85 VLAN: 128
03/31/01 07:21:16 In enqueue_to_ip_using_ipc:2924: DHCP Packet Dump:
ff
ff ff ff ff ff ff 00 0c 29 f9 d6 85 81 00 00 80 08 00 45 10 01 48 00 00 00 00
80 11 39 96 00 00 00 00 ff ff ff ff 00 44 00 43 01 34 ff 7a
ff 01 01 06 00 f9 fd 73 21 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 0c 29 f9 d6 85 00 00 00 00 00 00 00 00 00 00 00
ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
ff 00 00 00 00 00 00 00 00 00 00 00 63 82 53 63 35 01 03 32 04 0a ff 80 a3 0c
15 75 73 65 72 31 2d 76 69 72 74 75 61 6c 2d 6d 61 63 68 69
ff 6e 65 37 12 01 1c 02 03 0f 06 77 0c 2c 2f 1a 79 2a 79 f9 21 fc 2a ff 00 00
00 00 00 00 00
03/31/01 07:21:16 In udprelayProcessDHCPSnooping:6340: DHCP Request : Processing Success:
Port:1/5, Mac: 0:c:29:f9:d6:85 VLAN: 128
03/31/01 07:21:16 In dhcpSnoopingHandleLayer2Request:11492: No trusted port on Vlan: 128.

2.3.2 Successful DHCP request without Packet Dump

-> debug show dhcp

Debug Configurations:
------------------------------------------------------
DHCP Debug : Enabled,
DHCP Packet Dump : Disabled,
Debugging on : Port: 1/5,
Debugging on VLAN : 128,
DHCP Snooping Status : Switch Level Enabled

Date Time Log Message

--------+--------+--------------------------------------------------------------
03/31/01 07:28:33 In enqueue_to_ip_using_ipc:2921: DHCP Request : Received in DHCP Application:
Port: 1/5, Mac: 0:c:29:f9:d6:85 VLAN: 128
03/31/01 07:28:33 In udprelayProcessDHCPSnooping:6340: DHCP Request : Processing Success:
Port:1/5, Mac: 0:c:29:f9:d6:85 VLAN: 128
03/31/01 07:28:33 In dhcpSnoopingHandleLayer2Request:11636: DHCP Request : Before option 82
insertion: Port: 1/5, Mac: 0:c:29:f9:d6:85 VLAN: 128
03/31/01 07:28:33 In dhcpSnoopingHandleLayer2Request:12022: DHCP Request : After option 82
insertion: Port: 1/5, Mac: 0:c:29:f9:d6:85 VLAN: 128
03/31/01 07:28:33 In dhcpSnoopingHandleLayer2Request:12231: DHCP Request : Successfully sent to
NI: Port 1/48, Mac: 0:c:29:f9:d6:85 VLAN: 128
03/31/01 07:28:33 In enqueue_to_ip_using_ipc:2921: DHCP Ack : Received in DHCP Application: Port:
1/48, Mac: 0:c:29:f9:d6:85 VLAN: 128
03/31/01 07:28:33 In udprelayProcessDHCPSnooping:6340: DHCP Ack : Processing Success: Port:1/48,
Mac: 0:c:29:f9:d6:85 VLAN: 128
03/31/01 07:28:33 In dhcpSnoopingHandleLayer2Reply:10819: DHCP Ack : Before removing option 82:
Port: 1/48, Mac: 0:c:29:f9:d6:85 VLAN: 128
03/31/01 07:28:33 In dhcpSnoopingHandleLayer2Reply:11372: DHCP Ack : Sent to NI successfully:
Port: 1/5, Mac: 0:c:29:f9:d6:85 VLAN: 128

2.4 Show Commands

Listed below are show commands that are would help in troubleshooting DHCP snooping issues.

2.4.1 Show mac-address-table port

To check if the MAC address was learned.

2.4.2 Display DHCP binding table

-> show ip helper dhcp-snooping binding

Total Number of Binding Entries: 2

MAC Slot IP Lease VLAN Binding

Address Port Address Time(min) ID Type
-------------------+------+---------------+---------------+-------+-----------
00:0c:29:f9:d6:85 1/5 10.255.128.163 150 128 Dynamic
00:30:48:bf:f0:78 1/5 10.255.128.245 0 128 Static

2.4.3 Display IP-source filtering table

-> show ip helper dhcp-snooping ip-source-filter binding

MAC Slot IP Lease VLAN Binding
Address Port Address Time(min) ID Type
-------------------+------+---------------+---------+-------+-----------
00:0c:29:f9:d6:85 1/5 10.255.128.163 150 128 Dynamic
00:30:48:bf:f0:78 1/5 10.255.128.245 0 128 Static

Total number of Binding entries :2

3 Logs
In addition to the active debug commands that are available. The IP Source filtering Logs can be

3.1 IP Helper ISF Logs

The ISF Logs provides information about what MAC addresses are dropped on what port because of ISF.

-> show ip helper dhcp-snooping isf-log

Date Time Log Message
--------+--------+--------------------------------------------------------------
03/31/01 07:25:37 In qosNIMsgLogISFRule:1530: MAC 2C:FA:A2:71:E8:1C -> FF:FF:FF:FF:FF:FF
03/31/01 07:25:37 In qosNIMsgLogISFRule:1599: TOS 0x00 (UDP) 10.255.128.22:10210 ->
10.255.128.255:10210
03/31/01 07:25:37 In qosNIMsgLogISFRule:1511: Rule ISF-DROP matched
03/31/01 07:25:37 In qosNIMsgLogISFRule:1517: Tagged. 802.1p 0
03/31/01 07:25:37 In qosNIMsgLogISFRule:1520: svlan 128 VRF (null) port 1/48