Ip Dhcp Snooping Verify Mac-Address; Ip Dhcp Snooping Vlan - Edge-Core ES3510MA Management Manual

ip dhcp snooping
verify mac-address
ip dhcp snooping
vlan
This command verifies the client's hardware address stored in the DHCP
packet against the source MAC address in the Ethernet header. Use the no
form to disable this function.
S
YNTAX
[no] ip dhcp binding verify mac-address
D S
EFAULT ETTING
Enabled
C M
OMMAND ODE
Global Configuration
C U
OMMAND SAGE
If MAC address verification is enabled, and the source MAC address in the
Ethernet header of the packet is not same as the client's hardware address
in the DHCP packet, the packet is dropped.
E
XAMPLE
This example enables MAC address verification.
Console(config)#ip dhcp snooping verify mac-address
Console(config)#
R C
ELATED OMMANDS
ip dhcp snooping (661)

ip dhcp snooping vlan (665)

ip dhcp snooping trust (666)
This command enables DHCP snooping on the specified VLAN. Use the no
form to restore the default setting.
S
YNTAX
[no] ip dhcp snooping vlan vlan-id
vlan-id - ID of a configured VLAN (Range: 1-4093)
D S
EFAULT ETTING
Disabled
C M
OMMAND ODE
Global Configuration
C U
OMMAND SAGE
When DHCP snooping enabled globally using the
◆
command, and enabled on a VLAN with this command, DHCP packet
filtering will be performed on any untrusted ports within the VLAN as
specified by the ip dhcp snooping trust
– 665 –
| General Security Measures
C 25
HAPTER
ip dhcp snooping
command.
DHCP Snooping