PurposeCommand or Action
Configures the interface as a trusted interface for DHCP
relay agent information. The no form of this command
configures the port as an untrusted interface.
[no] ip dhcp relay information trusted
Example:
switch(config-if)# ip dhcp relay information
trusted
Step 3
For any Layer 3 interface, if the interface is
configured as trusted either through a global
command or an interface-level command, the
interface is considered as a trusted interface.
Hence, when the trusted-port command is
enabled at the global level, any Layer 3 interface
cannot be considered as untrusted irrespective
of the interface-level configuration.
Note
Displays the DHCP relay trusted ports configuration.(Optional) show ip dhcp relay information
trusted-sources
Step 4
Example:
switch(config-if)# show ip dhcp relay information
trusted-sources
Displays the DHCP configuration.(Optional) show running-config dhcp
Example:
Step 5
switch(config-if)# show running-config dhcp
Copies the running configuration to the startup
configuration.
(Optional) copy running-config startup-config
Example:
Step 6
switch(config-if)# copy running-config
startup-config
Configuring all Interfaces as Trusted or Untrusted
You can configure all Layer 3 interfaces as DHCP relay trusted or untrusted interfaces. By default, all interfaces
are untrusted. You can configure DHCP relay trust on the following types of interfaces:
• Layer 3 Ethernet interfaces and subinterfaces
• Layer 3 port-channel interfaces
When you enable the ip dhcp relay information trust-all command, any Layer 3 interface cannot be considered
as untrusted irrespective of the interface-level configuration.
Before you begin
Make sure that the DHCP feature is enabled.
SUMMARY STEPS
1. configure terminal
2. [no] ip dhcp relay information trust-all
3. (Optional) show ip dhcp relay information trusted-sources
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
347
Configuring DHCP
Configuring all Interfaces as Trusted or Untrusted
To Next Page
Loading...
