Configuring the Switch
3-90
DHCP Snooping Configuration
Use the DHCP Snooping Configuration page to enable DHCP Snooping globally on
the switch, or to configure MAC Address Verification.
Command Attributes
• DHCP Snooping Status – Enables DHCP snooping globally. (Default: Disabled)
• DHCP Snooping MAC-Address Verification – Enables or disables MAC address
verification. DHCP packets will be dropped if the source MAC address in the
Ethernet header of the packet is not same as the client’s hardware address in the
DHCP packet. (Default: Enabled)
Web – Click DHCP Snooping, Configuration. Select the required options and click
Apply.
Figure 3-46 DHCP Snooping Configuration
CLI – This example first enables DHCP Snooping and MAC-address verification.
DHCP Snooping VLAN Configuration
Enables DHCP snooping on the specified VLAN.
Command Attributes
• VLAN ID – ID of a configured VLAN. (Range: 1-4094)
• DHCP Snooping Status – Enables or disables DHCP snooping for the selected
VLAN. When DHCP snooping is enabled globally on the switch, and enabled on
the specified VLAN, DHCP packet filtering will be performed on any untrusted ports
within the VLAN.
Console(config)#ip dhcp snooping 4-115
Console(config)#ip dhcp snooping verify mac-address 4-119
Console(config)#