Table of Contents
Advertisement
24. DHCP Snooping Commands
24.DHCP Snooping Commands
The commands are used to allow only clients with a regular IP address
assigned by the DHCP server to communicate.
When this function is enabled, all ports are set to "untrusted." You need
to change the DHCP server and DHCP relay ports to "trusted." In
communications from clients connected on "untrusted" ports, only
DHCP packets are authenticated first and other packets are discarded.
The Switching Hub monitors communications with the DHCP server on
a "trusted" port and stores a mapping between assigned IP addresses
and MAC addresses in the Binding Table in the Switching Hub.
Only clients with an IP address and MAC address stored in the Binding
Table are authorized for normal communication.
enable dhcp_snoop
disable dhcp_snoop
show dhcp_snoop
show dhcp_snoop binding_entry { [ port <port> | vlan <vlan_name 32> | vlanid <vidlist> |
ipaddress <ipaddr> | mac_address <macaddr> ] }
Figure 24-1
310
Advertisement
Chapters
Table of Contents
