Cisco Nexus 5500 Series - Ip Dhcp Snooping Verify Mac-Address

128
Cisco Nexus 5500 Series NX-OS Security Command Reference
OL-27883-02
Chapter I Commands
ip dhcp snooping verify mac-address
ip dhcp snooping verify mac-address
To enable Dynamic Host Configuration Protocol (DHCP) snooping for MAC address verification, use
the ip dhcp snooping verify mac-address command. To disable DHCP snooping MAC address
verification, use the no form of this command.
ip dhcp snooping verify mac-address
no ip dhcp snooping verify mac-address
Syntax Description This command has no arguments or keywords.
Command Default None
Command Modes Global configuration mode
Command History
Usage Guidelines By default, MAC address verification with DHCP snooping is not enabled.
To use this command, you must enable the DHCP snooping feature using the feature dhcp command.
If the device receives a packet on an untrusted interface and the source MAC address and the DHCP
client hardware address do not match, address verification causes the device to drop the packet.
Examples This example shows how to enable DHCP snooping for MAC address verification:
switch# configure terminal
switch(config)# ip dhcp snooping verify mac-address
switch(config)#
Related Commands
Release Modification
5.2(1)N1(1) This command was introduced.
Command Description
feature dhcp Enables DHCP snooping on the switch.
show running-config
dhcp
Displays the DHCP snooping configuration configuration.