Edge-Core ECS4620-28F-2AC - Page 351

Chapter 9 | General Security Measures
DHCPv6 Snooping
– 351 –
show ip dhcp
snooping
This command shows the DHCP snooping configuration settings.
Command Mode
Privileged Exec
Example
Console#show ip dhcp snooping
Global DHCP Snooping Status: disabled
DHCP Snooping Information Option Status: enabled
DHCP Snooping Information Option Sub-option Format: extra subtype included
DHCP Snooping Information Option Remote ID: MAC Address (hex encoded)
DHCP Snooping Information Option TR101 Board ID: none
DHCP Snooping Information Policy: replace
DHCP Snooping is configured on the following VLANs:
1,
Verify Source MAC-Address: enabled
DHCP Snooping rate limit: unlimited
Interface Trusted Circuit-ID mode Circuit-ID Value
---------- ---------- --------------- --------------------------------
Eth 1/1 No
VLAN -Unit-Port ---
Eth 1/2 No
VLAN -Unit-Port ---
Eth 1/3 No
VLAN -Unit-Port ---
Eth 1/4 No
VLAN -Unit-Port ---
Eth 1/5 No
VLAN -Unit-Port ---
.
.
.
show ip dhcp
snooping binding
This command shows the DHCP snooping binding table entries.
Command Mode
Privileged Exec
Example
Console#show ip dhcp snooping binding
MAC Address IP Address Lease(sec) Type VLAN Interface
----------------- --------------- ---------- -------------------- ---- ------
11-22-33-44-55-66 192.168.0.99 0 Dynamic-DHCPSNP 1 Eth 1/5
Console#
DHCPv6 Snooping
DHCPv6 snooping allows a switch to protect a network from rogue DHCPv6 servers
or other devices which send port-related information to a DHCPv6 server. This