How does the IPv6 DHCP Guard feature treat DHCP messages from clients and other device roles?

IPv6 DHCP Guard is designed to protect the network from rogue DHCP servers and clients. It inspects DHCP messages and filters them based on configured policies. The key aspect of its operation is that all client messages are always switched, regardless of whether the device is configured as a DHCP server, relay, or client. This ensures that legitimate client requests can reach a valid DHCP server. The feature primarily focuses on blocking unauthorized DHCP server advertisements or replies from untrusted ports. Blocking only DHCP request messages would prevent clients from obtaining IP addresses. While access lists can be used for traffic filtering, DHCP Guard's core function is not solely reliant on them; it has its own inspection logic.