C613-50100-01 REV C Command Reference for x930 Series 2367
AlliedWare Plus™ Operating System - Version 5.4.6-1.x
DHCP SNOOPING COMMANDS
IP
DHCP SNOOPING
ip dhcp snooping
Overview Use this command to enable DHCP snooping on one or more VLANs.
Use the no variant of this command to disable DHCP snooping on the VLANs.
Syntax
ip dhcp snooping
no ip dhcp snooping
Default DHCP snooping is disabled on VLANs by default.
Mode Interface Configuration (VLANs)
Usage For DHCP snooping to operate on a VLAN, it must:
• be enabled on the particular VLAN by using this command
• be enabled globally on the switch by using the service dhcp-snooping
command
• have at least one port connected to a DHCP server configured as a trusted
port by using the ip dhcp snooping trust command
Any ACLs on a port that permit traffic matching DHCP snooping entries and block
other traffic, will block all traffic if DHCP snooping is disabled on the port. If you
disable DHCP snooping on particular VLANs using this command, you must also
remove any DHCP snooping ACLs from the ports to maintain connectivity (no
access-group command).
Examples To enable DHCP snooping on VLANs 2 to 4, use the commands:
awplus# configure terminal
awplus(config)# interface vlan2-vlan4
awplus(config-if)# ip dhcp snooping
To disable DHCP snooping on the switch, use the command:
awplus# configure terminal
awplus(config)# interface vlan2-vlan4
awplus(config-if)# no ip dhcp snooping
Related
Commands
ip dhcp snooping trust
service dhcp-snooping
show ip dhcp snooping