D-Link DGS-1510 Series - Page 181

DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
178
This example shows how to enable the verification that the source MAC address in a DHCP packet
matches the client hardware address.
Switch# configure terminal
Switch(config)# ip dhcp snooping verify mac-address
Switch(config)#
18-13 ip dhcp snooping vlan
This command is used to enable DHCP snooping on a VLAN or a group of VLANs. Use the no form
of this command to disable DHCP snooping on a VLAN or a group of VLANs.
ip dhcp snooping vlan VLAN-ID [, | -]
no ip dhcp snooping vlan VLAN-ID [, | -]
Parameters
vlan VLAN-ID
Specifies the VLAN to enable or disable the DHCP snooping
function.
,
(Optional) Specifies a series of interfaces, or separate a range of
interfaces from a previous range. No space is allowed before and
after the comma.
-
(Optional) Specifies a range of interfaces. No space is allowed
before and after the hyphen.
Default
By default, DHCP snooping is disabled on all VLANs.
Command Mode
Global Configuration Mode.
Command Default Level
Level: 12.
Usage Guideline
Use this command to globally enable DHCP snooping and use the ip dhcp snooping vlan command
to enable DHCP snooping for a VLAN. The DHCP snooping function snoops the DHCP packets
arriving at the untrusted interface on VLAN that is enabled for DHCP snooping. With this function, the
DHCP packets come from the untrusted interface can be validated and a DHCP binding database will
be constructed for the DHCP snooping enabled VLAN. The binding database provides IP and MAC
binding information that can be further used by the IP source guard and dynamic ARP inspection
process.
Example
This example shows how to enable DHCP snooping on VLAN 10.
Switch# configure terminal
Switch(config)# ip dhcp snooping vlan 10
Switch(config)#
This example shows how to enable DHCP snooping on a range of VLANs.
Switch# configure terminal
Switch(config)# ip dhcp snooping vlan 10,15-18
Switch(config)#