Client Security Commands
4-115
4
Command Mode
Privileged Exec
Example
DHCP Snooping Commands
DHCP snooping allows a switch to protect a network from rogue DHCP servers or
other devices which send port-related information to a DHCP server. This
information can be useful in tracking an IP address back to a physical port. This
section describes commands used to configure DHCP snooping.
ip dhcp snooping
This command enables DHCP snooping globally. Use the no form to restore the
default setting.
Syntax
[no] ip dhcp snooping
Default Setting
Disabled
Console#show ip source-guard binding
MacAddress IpAddress Lease(sec) Type VLAN Interface
----------------- ------------- ---------- --------- ---- ---------
11-22-33-44-55-66 192.168.0.99 0 Static 1 Eth 1/5
Console#
Table 4-3 DHCP Snooping Commands
Command Function Mode Page
ip dhcp snooping Enables DHCP snooping globally GC 4-115
ip dhcp snooping
vlan
Enables DHCP snooping on the specified VLAN GC 4-117
ip dhcp snooping
trust
Configures the specified interface as trusted IC 4-118
ip dhcp snooping
verify mac-address
Verifies the client’s hardware address stored in the DHCP packet
against the source MAC address in the Ethernet header
GC 4-119
ip dhcp snooping
information option
Enables DHCP Option 82 information relay GC 4-120
ip dhcp snooping
information policy
Specifies how to handle DHCP client requests which already
contain Option 82 information
GC 4-121
show ip dhcp
snooping
Shows the DHCP snooping configuration settings PE 4-121
show ip dhcp
snooping binding
Shows the DHCP snooping binding table entries PE 4-122
To Next Page
Loading...
Need help?
General