Table of Contents
Advertisement
C
S
LIENT
ECURITY
from a DHCP server, any packets received from untrusted ports are
dropped.
Example
This example enables DHCP snooping globally for the switch.
Console(config)#ip dhcp snooping
Console(config)#
Related Commands
ip dhcp snooping vlan (23-20)
ip dhcp snooping trust (23-24)
ip dhcp snooping vlan
This command enables DHCP snooping on the specified VLAN. Use the
no form to restore the default setting.
Syntax
[no] ip dhcp snooping vlan vlan-id
vlan-id - ID of a configured VLAN (Range: 1-4093)
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
• When DHCP snooping enabled globally using the ip dhcp snooping
command (page 23-18), and enabled on a VLAN with this command,
DHCP packet filtering will be performed on any untrusted ports
within the VLAN as specified by the ip dhcp snooping trust
command (page 23-24).
• When the DHCP snooping is globally disabled, DHCP snooping can
still be configured for specific VLANs, but the changes will not take
effect until DHCP snooping is globally re-enabled.
23-20
C
OMMANDS
Advertisement
Table of Contents
