Syntax
•
ip dhcp snooping vlan vlan-id
•
no ip dhcp snooping vlan vlan-id
•
vlan-id — Specifies the VLAN ID.
Default Configuration
The default configuration is disabled.
Command Mode
Global Configuration mode.
User Guidelines
•
You must first globally enable DHCP snooping before enabling DHCP snooping on a VLAN.
Example
The following example enables DHCP snooping on VLAN 1000:
console(config)# ip dhcp snooping vlan 1000
ip dhcp snooping trust
The ip dhcp snooping trust Interface Configuration (Ethernet, Port-channel) mode command
configures a port as trusted for DHCP snooping purposes. Use the no form of this command to return to
the default settings.
Syntax
•
ip dhcp snooping trust
•
no ip dhcp snooping trust
Default Configuration
The default configuration is that the interface is not trusted.
Command Mode
Interface Configuration (Ethernet, Port-channel) mode.
User Guidelines
•
Configure as trusted ports those that are connected to a DHCP server or to other switches or routers.
Configure as untrusted ports those that are connected to DHCP clients.
154
DHCP Snooping