C
HAPTER
25
| General Security Measures
DHCP Snooping
– 664 –
â—† Use the ip dhcp snooping information option command to specify
how to handle DHCP client request packets which already contain
Option 82 information.
EXAMPLE
This example enables the DHCP Snooping Information Option.
Console(config)#ip dhcp snooping information option
Console(config)#
ip dhcp snooping
information policy
This command sets the DHCP snooping information option policy for DHCP
client packets that include Option 82 information.
SYNTAX
ip dhcp snooping information policy {drop | keep | replace}
drop - Drops the client’s request packet instead of relaying it.
keep - Retains the Option 82 information in the client request, and
forwards the packets to trusted ports.
replace - Replaces the Option 82 information circuit-id and
remote-id fields in the client’s request with information about the
relay agent itself, inserts the relay agent’s address (when DHCP
snooping is enabled), and forwards the packets to trusted ports.
DEFAULT SETTING
replace
COMMAND MODE
Global Configuration
COMMAND USAGE
When the switch receives DHCP packets from clients that already include
DHCP Option 82 information, the switch can be configured to set the action
policy for these packets. The switch can either drop the DHCP packets,
keep the existing information, or replace it with the switch’s relay
information.
EXAMPLE
Console(config)#ip dhcp snooping information policy drop
Console(config)#
To Next Page
Loading...
Need help?
General