ip dhcp snooping verify mac-address
To enable DHCP snooping MAC address verification, use the ip dhcp snooping verify mac-address command.
To disable DHCP snooping MAC address verification, use the no form of this command.
ip dhcp snooping verify mac-address
no ip dhcp snooping verify mac-address
Syntax Description
This command has no arguments or keywords.
Command Default
None
Command Modes
Global configuration
Command History
ModificationRelease
This command was introduced.4.0(1)
Usage Guidelines
By default, MAC address verification with DHCP snooping is not enabled.
To use this command, you must enable the DHCP snooping feature (see the feature dhcp command).
If the device receives a packet on an untrusted interface and the source MAC address and the DHCP client
address do not match, address verification causes the device to drop the packet.
This command does not require a license.
Examples
This example shows how to enable DHCP snooping MAC address verification:
switch# configure terminal
switch(config)# ip dhcp snooping verify mac-address
switch(config)#
Related Commands
DescriptionCommand
Enables or disables the DHCP relay agent.ip dhcp relay
Globally enables DHCP snooping on the device.ip dhcp snooping
Enables the insertion and removal of option-82
information for DHCP packets forwarded without the
use of the DHCP relay agent.
ip dhcp snooping information option
Cisco Nexus 7000 Series Security Command Reference
414
I Commands
ip dhcp snooping verify mac-address
To Next Page
Loading...
