IP Helper Configuration on Broadcom SoNiC

IP Helper Configuration on Broadcom SoNiC

1. To Display IP helper global information

Command:  show ip forward-protocol 

 

2. To Displays IP helper server addresses configured on interface

Command: 

show ip helper-address [ <iface> ] 
 

3.To Display IP helper packet counters and statistics on interface

Command: 

show ip helper-address statistics [ <iface> ]  

4.To Clear IP helper statistics on interface

Command:

clear ip helper-address statistics [ <iface> ] 

 

5.To Enable IP helper relay functionality for specified UDP packets. 

Commands: 

Enabling IP forwarding: 

sonic-cli# configure terminal 
sonic-cli(config)# ip forward-protocol udp enable 
 

Disabling IP forwarding: 

sonic-cli# configure terminal 
sonic-cli(config)# no ip forward-protocol udp enable 

 

6.To exclude UDP Port from list of IP packets that have to be relayed

Command:

ip forward-protocol udp exclude { tftp|dns|ntp|netbios-name-server|netbios-datagram-server|tacacs| } 

Examples 

Exclude a custom UDP port: 

sonic-cli# configure terminal 
sonic-cli(config)# ip forward-protocol udp exclude 12200 
sonic-cli(config)# 
 

Exclude a well-known supported-by-default port: 

sonic-cli# configure terminal 
sonic-cli(config)# ip forward-protocol udp exclude tftp 
sonic-cli(config)# 
 

7. To Include UDP Port for which IP packets have to be relayed


Command:

ip forward-protocol udp include { tftp|dns|ntp|netbios-name-server|netbios-datagram-server|tacacs| } 

Examples 

sonic-cli# configure terminal 
sonic-cli(config)# ip forward-protocol udp include 12200 
sonic-cli(config)# 
 

Include a well-known supported-by-default port: 

sonic-cli# configure terminal 
sonic-cli(config)# ip forward-protocol udp include tftp 
sonic-cli(config)# 
 

 

8.Rate limit CPU-bound packets

Command:  

ip forward-protocol udp rate-limit <rate> 

Rate - 600 to 10,000 pps (default 600 pps)

Examples 

Configure rate limit: 

sonic-cli# configure terminal 
sonic-cli(config)# ip forward-protocol udp rate-limit 1000 
sonic-cli(config)# 
 

Unconfigure rate limit: 

sonic-cli# configure terminal 
sonic-cli(config)# no ip forward-protocol udp rate-limit 
sonic-cli(config)# 

 

9.To Configure IP helper server address for an interface.

Command:

ip helper-address <addr>  

Examples 

Configure IP helper server address on a physical interface: 

sonic-cli# configure terminal 
sonic-cli(config)# interface Ethernet0 
sonic-cli(conf-if-Ethernet0)# ip helper-address 3.3.3.3 
sonic-cli(conf-if-Ethernet0)# 
 

Unconfigure IP helper server address: 

sonic-cli# configure terminal 
sonic-cli(config)# interface Ethernet0 
sonic-cli(conf-if-Ethernet0)# no ip helper-address 3.3.3.3 
sonic-cli(conf-if-Ethernet0)# 
 

Configure IP helper server address on a VLAN interface: 

sonic-cli# configure terminal 
sonic-cli(config)# interface Vlan100 
sonic-cli(conf-if-Vlan100)# ip helper-address 3.3.3.3 
sonic-cli(conf-if-Vlan100)# 
 

Unconfigure IP helper server address: 

sonic-cli# configure terminal 
sonic-cli(config)# interface Vlan100 
sonic-cli(conf-if-Vlan100)# no ip helper-address 3.3.3.3 
sonic-cli(conf-if-Vlan100)# 
 

Configure IP helper server address on a PortChannel interface: 

sonic-cli# configure terminal 
sonic-cli(config)# interface PortChannel100 
sonic-cli(conf-if-PortChannel100)# ip helper-address 3.3.3.3 
sonic-cli(conf-if-PortChannel100)# 
 

Unconfigure IP helper server address: 

sonic-cli# configure terminal 
sonic-cli(config)# interface PortChannel100 
sonic-cli(conf-if-PortChannel100)# no ip helper-address 3.3.3.3 
sonic-cli(conf-if-PortChannel100)# 


    • Related Articles

    • DHCP Snooping configuration on Broadcom Sonic

      Enabling DHCP Snooping Command: ip dhcp snooping This command enables DHCP Snooping globally on the device, helping monitor and block unauthorized DHCP servers. Disable DHCP snooping sonic-cli# configure terminal sonic-cli(config)# no ip dhcp ...

    • Management Interface Configuration (SONiC)

      Configure the management interface (eth0) for network administration in SONiC. Default Configuration: By default, eth0 uses DHCP to dynamically obtain an IP address from a DHCP server. Static IP Configuration: Command Line: sudo config interface ip ...

    • Border Gateway Protocol- FAQ (Broadcom SoNiC)

      1. How do I configure BGP hold and keepalive timers? Use timers <keepalive> <hold>. 2. How do I enable BGP in SONiC? Use router bgp <AS_number> to enter BGP configuration mode. 3. What does neighbor mean in BGP configuration? neighbor defines the IP ...

    • Syslog server configuration in Broadcom SoNiC

      1. To Configure remote syslog server to forward syslog messages Command: logging server <host> [ message-type { audit | auditd-system | event | log } ] [ remote-port <vrport> ] [ protocol { tcp | tls | udp } ] [ source-interface { Ethernet | Loopback ...

    • Configuring AAA in Broadcom sonic

      AAA Authentication Fail through Description: Configures AAA authentication fail through. Syntax: aaa authentication failthrough <enable> Parameters: enable: Enable or disable the feature. Example: sonic(config)# aaa authentication failthrough enable ...