Ip Dhcp Snooping Vlan - Edge-Core ECS3510-26P Management Manual

| General Security Measures
C 24
HAPTER
DHCP Snooping
ip dhcp snooping
vlan
E
XAMPLE
This example enables MAC address verification.
Console(config)#ip dhcp snooping verify mac-address
Console(config)#
R C
ELATED OMMANDS
ip dhcp snooping (686)

ip dhcp snooping vlan (690)

ip dhcp snooping trust (691)
This command enables DHCP snooping on the specified VLAN. Use the no
form to restore the default setting.
S
YNTAX
[no] ip dhcp snooping vlan vlan-id
vlan-id - ID of a configured VLAN (Range: 1-4093)
D S
EFAULT ETTING
Disabled
C M
OMMAND ODE
Global Configuration
C U
OMMAND SAGE
When DHCP snooping is enabled globally using the
◆
command, and enabled on a VLAN with this command, DHCP packet
filtering will be performed on any untrusted ports within the VLAN as
specified by the ip dhcp snooping trust
When the DHCP snooping is globally disabled, DHCP snooping can still
◆
be configured for specific VLANs, but the changes will not take effect
until DHCP snooping is globally re-enabled.
◆ When DHCP snooping is globally enabled, and DHCP snooping is then
disabled on a specific VLAN, all dynamic bindings learned for this VLAN
are removed from the binding table.
E
XAMPLE
This example enables DHCP snooping for VLAN 1.
Console(config)#ip dhcp snooping vlan 1
Console(config)#
R C
ELATED OMMANDS
ip dhcp snooping (686)
ip dhcp snooping trust (691)
– 690 –
ip dhcp snooping
command.