Configuring Ports For Dhcp Snooping - Samsung iES4028F Management Manual

3
Configuring the Switch
CLI – This example enables DHCP Snooping Information Option, and sets the policy
as replace
.
Console(config)#ip dhcp snooping information option
Console(config)#ip dhcp snooping information policy replace
Console(config)#exit
Console#show ip dhcp snooping
Global DHCP Snooping status: disable
DHCP Snooping Information Option Status: disable
DHCP Snooping Information Policy: replace
DHCP Snooping is configured on the following VLANs:
Verify Source Mac-Address: enable
Interface
----------
Eth 1/1
Eth 1/2
Eth 1/3
. .
.

Configuring Ports for DHCP Snooping

Use the DHCP Snooping Port Configuration page to configure switch ports as
trusted or untrusted.
Command Usage
• A trusted interface is an interface that is configured to receive only messages from
within the network. An untrusted interface is an interface that is configured to
receive messages from outside the network or firewall.
• When DHCP snooping enabled both globally and on a VLAN, DHCP packet
filtering will be performed on any untrusted ports within the VLAN.
• When an untrusted port is changed to a trusted port, all the dynamic DHCP
snooping bindings associated with this port are removed.
• Set all ports connected to DHCP servers within the local network or firewall to
trusted state. Set all other ports outside the local network or firewall to untrusted
state.
3-120
Trusted
----------
No
No
No
4-169
4-170
4-171