Edge-Core ECS2100-28T Reference Guide

Chapter 9 | General Security Measures
DHCPv4 Snooping
– 290 –
Command Mode
Global Configuration
Command Usage
When the switch receives DHCP packets from clients that already include DHCP
Option 82 information, the switch can be configured to set the action policy for
these packets. The switch can either drop the DHCP packets, keep the existing
information, or replace it with the switch’s relay information.
Example
Console(config)#ip dhcp snooping information policy drop
Console(config)#
ip dhcp snooping
verify mac-address
This command verifies the client’s hardware address stored in the DHCP packet
against the source MAC address in the Ethernet header. Use the
no form to disable
this function.
Syntax
[
no ] ip dhcp snooping verify mac-address
Default Setting
Enabled
Command Mode
Global Configuration
Command Usage
If MAC address verification is enabled, and the source MAC address in the Ethernet
header of the packet is not same as the client’s hardware address in the DHCP
packet, the packet is dropped.
Example
This example enables MAC address verification.
Console(config)#ip dhcp snooping verify mac-address
Console(config)#
Related Commands
ip dhcp snooping (283)
ip dhcp snooping vlan (291)
ip dhcp snooping trust (295)

Edge-Core ECS2100-28T Specifications

General

Model	ECS2100-28T
Switching Capacity	56 Gbps
Forwarding Rate	41.7 Mpps
MAC Address Table Size	16K
Jumbo Frame Support	9KB
VLANs	4K
Weight	3.5 kg
Storage Humidity	5% to 95% (non-condensing)
Type	Managed Switch
Ports	24 x 10/100/1000BASE-T, 4 x 1G SFP
Power Supply	AC 100-240V, 50/60Hz
Dimensions (W x D x H)	440 x 200 x 44 mm
Operating Temperature	0 to 50 °C
Storage Temperature	-40°C to 70°C
Operating Humidity	10% to 90% (non-condensing)
Management	SNMP