DHCP Snooping Commands
22-11
22
- If there is a binding with same VLAN ID and MAC address, and the entry
type is static IP source guard binding, static DHCP snooping binding, or
dynamic DHCP snooping binding, the new entry will replace the old one.
• When the lease time for a dynamic or static DHCP binding entry expires, it is
removed from the binding table.
Example
This example configures a static DHCP binding entry on port 5, and sets the lease
time to make it a permanent entry.
Related Commands
ip dhcp snooping (22-7)
ip dhcp snooping vlan (22-9)
ip dhcp snooping trust (22-12)
ip dhcp snooping verify mac-address
This command verifies the client’s hardware address stored in the DHCP packet
against the source MAC address in the Ethernet header. Use the no form to disable
this function.
Syntax
[no] ip dhcp binding verify mac-address
Default Setting
Enabled
Command Mode
Global Configuration
Command Usage
If MAC address verification is enabled, and the source MAC address in the
Ethernet header of the packet is not same as the client’s hardware address in
the DHCP packet, the packet is dropped.
Example
This example enables MAC address verification.
Related Commands
ip dhcp snooping (22-7)
ip dhcp snooping vlan (22-9)
ip dhcp snooping trust (22-12)
Console(config)#ip dhcp snooping binding 11-22-33-44-55-66 vlan 1
192.168.0.99 interface ethernet 1/5 0
Console(config-if)#
Console(config)#ip dhcp snooping verify mac-address
Console(config)#
To Next Page
Loading...
Need help?
General