C
ONFIGURING THE
add a dynamic entry for itself to the binding table when it receives an ACK
message from a DHCP server. Also, when the switch sends out DHCP
client packets for itself, no filtering takes place. However, when the switch
receives any messages from a DHCP server, any packets received from
untrusted ports are dropped.
DHCP Snooping Configuration
Command Attributes
•
DHCP Snooping Status – Enables or disables DHCP snooping
globally.
•
DHCP Snooping MAC-Address Verification – Enables or disables
MAC address verification. DHCP packets will be dropped if the source
MAC address in the Ethernet header of the packet is not same as the
client's hardware address in the DHCP packet.
Web – Click DHCP Snooping, Configuration.
CLI – This example first enables DHCP Snooping, and then enables
DHCP Snooping MAC-Address Verification.
Console(config)#ip dhcp snooping
Console(config)#ip dhcp snooping verify mac-address
Console(config)#
DHCP Snooping VLAN Configuration
Enables DHCP snooping on the specified VLAN.
3-248
S
WITCH
Figure 3-109. DHCP Snooping Configuration
4-301
4-306