Dell S6000–ON User Manual

source address and MAC source address are a legitimate pair, rather than validating each attribute
individually. You cannot configure IP+MAC SAV with IP SAV.
1. Allocate at least one FP block to the ipmacacl CAM region.
CONFIGURATION mode
cam-acl l2acl
2. Save the running-config to the startup-config.
EXEC Privilege mode
copy running-config startup-config
3. Reload the system.
EXEC Privilege
reload
4. Do one of the following.
• Enable IP+MAC SAV.
INTERFACE mode
ip dhcp source-address-validation ipmac
• Enable IP+MAC SAV with VLAN option.
INTERFACE mode
ip dhcp source-address-validation ipmac vlan vlan-id
Dell Networking OS creates an ACL entry for each IP+MAC address pair and optionally with its VLAN ID in
the binding table and applies it to the interface.
To display the IP+MAC ACL for an interface for the entire system, use the show ip dhcp snooping
source-address-validation [interface] command in EXEC Privilege mode.
Viewing the Number of SAV Dropped Packets
The following output of the show ip dhcp snooping source-address-validation discard-
counters command displays the number of SAV dropped packets.
Dell>show ip dhcp snooping source-address-validation discard-counters
deny access-list on TenGigabitEthernet 1/1/1
Total cam count 1
deny count (0 packets)
deny access-list on TenGigabitEthernet 1/2/1
Total cam count 2
deny vlan 10 count (0 packets)
deny vlan 20 count (0 packets)
The following output of the show ip dhcp snooping source-address-validation discard-
counters interface interface command displays the number of SAV dropped packets on a
particular interface.
Dell>show ip dhcp snooping source-address-validation discard-counters interface
TenGigabitEthernet 1/1/1
deny access-list on TenGigabitEthernet 1/1/1
Total cam count 2
306
Dynamic Host Configuration Protocol (DHCP)

Dell S6000–ON Specifications

General

Brand	Dell
Model	S6000–ON
Category	Switch
Language	English