Cisco Nexus 5500 Series - Ip Dhcp Packet Strict-Validation

124
Cisco Nexus 5500 Series NX-OS Security Command Reference
OL-27883-02
Chapter I Commands
ip dhcp packet strict-validation
ip dhcp packet strict-validation
To enable the strict validation of Dynamic Host Configuration Protocol (DHCP) packets by the DHCP
snooping feature, use the ip dhcp packet strict-validation command. To disable the strict validation of
DHCP packets, use the no form of this command.
ip dhcp packet strict-validation
no ip dhcp packet strict-validation
Syntax Description This command has no arguments or keywords.
Command Default None
Command Modes Global configuration mode
Command History
Usage Guidelines You must enable DHCP snooping before you can use the ip dhcp packet strict-validation command.
Strict validation of DHCP packets checks that the DHCP options field in DCHP packets is valid,
including the "magic cookie" value in the first four bytes of the options field. When strict validation of
DHCP packets is enabled, the device drops DHCP packets that fail validation.
Examples This example shows how to enable the strict validation of DHCP packets:
switch# configure terminal
switch(config)# ip dhcp packet strict-validation
switch(config)#
Related Commands
Release Modification
5.2(1)N1(1) This command was introduced.
Command Description
feature dhcp Enables DHCP snooping on the switch.
show ip dhcp snooping Displays general information about DHCP snooping.
show running-config
dhcp
Displays the current DHCP configuration.