111
Syntax
dhcp snooping deny
undo dhcp snooping deny
Default
A port does not block DHCP requests.
Views
Layer 2 Ethernet interface/Layer 2 aggregate interface view
Predefined user roles
network-admin
Usage guidelines
A DHCP packet blocking port drops all incoming DHCP requests.
Examples
# Configure HundredGigE 1/0/1 as a DHCP packet blocking port.
<Sysname> system-view
[Sysname] interface hundredgige 1/0/1
[Sysname-HundredGigE1/0/1] dhcp snooping deny
dhcp snooping enable
Use dhcp snooping enable to enable DHCP snooping.
Use undo dhcp snooping enable to disable DHCP snooping.
Syntax
dhcp snooping enable
undo dhcp snooping enable
Default
DHCP snooping is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Use the DHCP snooping feature together with the trusted port configuration. Trusted ports forward
responses from DHCP servers and untrusted ports discard responses from DHCP servers. This
mechanism ensures that DHCP clients obtain IP addresses from authorized DHCP servers.
When DHCP snooping is disabled, all ports on the device forward responses from DHCP servers.
Examples
# Enable DHCP snooping.
<Sysname> system-view
[Sysname] dhcp snooping enable