Enables IP (IPv4 and IPv6) packet snooping on wired captive portals, and also configures the subnet to snoop. When enabled, IP packets received from wired captive portal clients, on the specified subnet, are snooped to learn IP to MAC mapping.

Supported in the following platforms:

  • Access Points — AP505i, AP510i/e, AP560i/h
  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000


captive-portal [ipv4-snooping|ipv6-snooping] subnet <IPv4/M|IPv6/M> {excluded-address <IPv4|IPv6>}


captive-portal [ipv4-snooping|ipv6-snooping] subnet <IPv4/M|IPv6/M> {excluded-address <IPv4|IPv6>}
captive-portal [ipv4-snooping| ipv6-snooping] Enables snooping of IPv4 or IPv6 packets (based on the option selected) for wired captive portal clients
subnet <IPv4/M| IPv6/M> Enables IPv4 or IPv6 packet snooping on a specified subnet
  • <IPv4/M|IPv6/M> – Specify the subnet address in the A.B.C.D/M or X:X::X:X/M format to identify an IPv4 or IPv6 subnet respectively. When specified, this is the IPv4/IPv6 subnet on which IP packets are to be snooped.
excluded-address <IPv4|IPv6> Optional. Configures the IPv4 or IPv6 address excluded from snooping within the specified IPv4|IPv6 subnet.
  • <IPv4|IPv6> – Specify the IPv4 or IPv6 address. Use this parameter to configure the gateway‘s address.


nx9500-6C8809(config-profile NX9500Test-bridge-vlan-4)#captive-portal ip-snooping subnet excluded-address

nx9500-6C8809(config-profile NX9500Test-bridge-vlan-4)#show context
 bridge vlan 4
  captive-portal ip-snooping subnet excluded-address
  ip igmp snooping
  ip igmp snooping querier
  ipv6 mld snooping
  ipv6 mld snooping querier
nx9500-6C8809(config-profile NX9500Test-bridge-vlan-4)#

Related Commands

no Disables IP packet snooping on wired captive portals