C
ONFIGURING
THE
S
WITCH
3-248
add a dynamic entry for itself to the binding table when it receives an ACK
message from a DHCP server. Also, when the switch sends out DHCP
client packets for itself, no filtering takes place. However, when the switch
receives any messages from a DHCP server, any packets received from
untrusted ports are dropped.
DHCP Snooping Configuration
Command Attributes
• DHCP Snooping Status – Enables or disables DHCP snooping
globally.
• DHCP Snooping MAC-Address Verification – Enables or disables
MAC address verification. DHCP packets will be dropped if the source
MAC address in the Ethernet header of the packet is not same as the
client’s hardware address in the DHCP packet.
Web – Click DHCP Snooping, Configuration.
Figure 3-109. DHCP Snooping Configuration
CLI – This example first enables DHCP Snooping, and then enables
DHCP Snooping MAC-Address Verification.
DHCP Snooping VLAN Configuration
Enables DHCP snooping on the specified VLAN.
Console(config)#ip dhcp snooping 4-301
Console(config)#ip dhcp snooping verify mac-address 4-306
Console(config)#
To Next Page
Loading...
Need help?
General
