Example 2 Show DHCP-snooping statistics
HP Switch(config)# show dhcp-snooping stats
Packet type Action Reason Count
----------- ------- ---------------------------- ---------
server forward from trusted port 8
client forward to trusted port 8
server drop received on untrusted port 2
server drop unauthorized server 0
client drop destination on untrusted port 0
client drop untrusted option 82 field 0
client drop bad DHCP release request 0
client drop failed verify MAC check 0
Enabling DHCP snooping on VLANs
DHCP snooping on VLANs is disabled by default. To enable DHCP snooping on a VLAN or range
of VLANs enter this command:
HP Switch(config)# dhcp-snooping vlan <vlan-id-range>
You can also use this command in the vlan context, where you cannot enter a range of VLANs for
snooping.
Example 3 “DCHP snooping on a VLAN” shows DHCP snooping enabled on VLAN 4.
Example 3 DCHP snooping on a VLAN
HP Switch(config)# dhcp-snooping vlan 4
HP Switch(config)# show dhcp-snooping
DHCP Snooping Information
DHCP Snooping : Yes
Enabled Vlans : 4
Verify MAC : Yes
Option 82 untrusted policy : drop
Option 82 Insertion : Yes
Option 82 remote-id : mac
Configuring DHCP snooping trusted ports
By default, all ports are untrusted. To configure a port or range of ports as trusted, enter this
command (see Example 4 “Setting trusted ports”).
HP Switch(config)# dhcp-snooping trust <port-list>
You can also use this command in the interface context, in which case you cannot enter a port list.
Configuring advanced threat protection 9
To Next Page
Loading...
