Cisco Nexus 5500 Series - Ip Dhcp Snooping Trust

127
Cisco Nexus 5500 Series NX-OS Security Command Reference
OL-27883-02
Chapter I Commands
ip dhcp snooping trust
ip dhcp snooping trust
To configure an interface as a trusted source of Dynamic Host Configuration Protocol (DHCP) messages,
use the ip dhcp snooping trust command. To configure an interface as an untrusted source of DHCP
messages, use the no form of this command.
ip dhcp snooping trust
no ip dhcp snooping trust
Syntax Description This command has no arguments or keywords.
Command Default By default, no interface is a trusted source of DHCP messages.
Command Modes Interface configuration mode
Command History
Usage Guidelines To use this command, you must enable the DHCP snooping feature (see the feature dhcp command).
You can configure DHCP trust on the following types of interfaces:
• Layer 3 Ethernet interfaces and subinterfaces
• Layer 2 Ethernet interfaces
• Private VLAN interfaces
Examples This example shows how to configure an interface as a trusted source of DHCP messages:
switch# configure terminal
switch(config)# interface ethernet 2/1
switch(config-if)# ip dhcp snooping trust
switch(config-if)#
Related Commands
Release Modification
5.2(1)N1(1) This command was introduced.
Command Description
ip dhcp snooping Globally enables DHCP snooping on the device.
ip dhcp snooping vlan Enables DHCP snooping on the specified VLANs.
show ip dhcp snooping Displays general information about DHCP snooping.
show running-config
dhcp
Displays DHCP snooping configuration, including IP Source Guard
configuration.