set dhcpsnooping binding
SecureStack C2 Configuration Guide 17-7
Example
Thisexampleconfiguresportge.1.1asatrustedport.
C2
(rw)->set dhcpsnooping trust port ge.1.1 enable
set dhcpsnooping binding
UsethiscommandtoaddastaticDHCPbindingtotheDHCP snoopingdatabase.
Syntax
set dhcpsnooping binding mac-address vlan vlan-id ipaddr port port-string
Parameters
Defaults
None.
Mode
Switchcommand,read‐write.
Usage
WhenenabledgloballyandonVLANs,DHCPsnoopingbuildsitsbindingsdatabasefromDHCP
clientmessagesreceivedonuntrustedports.Suchentriesinthedatabasearedynamicentries
whichwillberemovedinresponsetovalidDECLINE,RELEASE,andNACKmessagesorwhen
theabsoluteleasetimeoftheentryexpires.
Youcanaddstaticentriestothebindingsdatabasewiththiscomm and.
Example
Thisexamplecreatesastaticentry,associatingMACaddress00:01:02:33:44:55withIPaddress
192.168.10.10andVLAN10,portge.1.1.
C2
(rw)->set dhcpsnooping binding 00:01:02:33:44:55 vlan 10 192.168.10.10 port
ge.1.1
set dhcpsnooping verify
UsethiscommandtoenableordisableDHCPsnoopingtofilteronsourceMACaddress.
Syntax
set dhcpsnooping verify mac-address {enable | disable}
mac‐address SpecifiestheMACaddressofthebindingentry.
vlanvlan‐id SpecifiestheVLANofthebindingentry.
ipaddr SpecifiestheIPaddressofthebindingentry.
portport‐string Specifiestheportofthebindingentry.