Chapter 9
| General Security Measures
DHCPv4 Snooping
– 314 –
ip dhcp snooping
verify mac address
This command verifies the client’s hardware address stored in the DHCP packet
against the source MAC address in the Ethernet header. Use the no form to disable
this function.
Syntax
[no] ip dhcp snooping verify mac-address
Default Setting
Enabled
Command Mode
Global Configuration
Command Usage
If MAC address verification is enabled, and the source MAC address in the Ethernet
header of the packet is not same as the client’s hardware address in the DHCP
packet, the packet is dropped.
Example
This example enables MAC address verification.
Console(config)#ip dhcp snooping verify mac-address
Console(config)#
Related Commands
ip dhcp snooping (306)
ip dhcp snooping vlan (314)
ip dhcp snooping trust (317)
ip dhcp snooping vlan This command enables DHCP snooping on the specified VLAN. Use the no form to
restore the default setting.
Syntax
[no] ip dhcp snooping vlan vlan-id
vlan-id - ID of a configured VLAN (Range: 1-4094)
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
â—† When DHCP snooping is enabled globally using the ip dhcp snooping
command, and enabled on a VLAN with this command, DHCP packet filtering
To Next Page
Loading...
Need help?
General