responses received on a trusted port are forwarded. Make sure that all other ports are untrusted
so that any DHCP (or BootP) responses received are discarded.
You can configure DHCP filtering on physical ports and LAGs. DHCP filtering is not operable
on VLAN interfaces.
ip dhcp filtering
This command enables DHCP filtering globally.
Default
Format
Mode
no ip dhcp filtering
This command disables DHCP filtering.
Format
Mode
ip dhcp filtering trust
This command configures an interface as trusted.
Default
Format
Mode
no ip dhcp filtering trust
This command returns an interface to the default value for DHCP filtering.
Format
Mode
show ip dhcp filtering
This command displays the DHCP filtering configuration.
Format
Mode
Interface
Trusted
disabled
ip dhcp filtering
Global Config
no ip dhcp filtering
Global Config
untrusted
ip dhcp filtering trust
Interface Config
no ip dhcp filtering trust
Interface Config
show ip dhcp filtering
Privileged EXEC
The interface by slot/port.
Indicates whether the interface is trusted or untrusted.
6 Utility Commands
DHCP Filtering
291