Ip Dhcp Snooping Verify Mac-Address - Cisco ME 3400 Command Reference Manual

ip dhcp snooping verify mac-address

ip dhcp snooping verify mac-address
Use the ip dhcp snooping verify mac-address global configuration command to configure the switch
to verify on an untrusted port that the source MAC address in a DHCP packet matches the client
hardware address. Use the no form of this command to configure the switch to not verify the MAC
addresses.
Syntax Description This command has no arguments or keywords.
Defaults
The switch verifies the source MAC address in a DHCP packet that is received on untrusted ports
matches the client hardware address in the packet.
Command Modes
Global configuration
Command History Release
12.2(25)EX
Usage Guidelines In a service-provider network, when a switch receives a packet from a DHCP client on an untrusted port,
it automatically verifies that the source MAC address and the DHCP client hardware address match. If
the addresses match, the switch forwards the packet. If the addresses do not match, the switch drops the
packet.
Examples This example shows how to disable the MAC address verification:
Switch(config)# no ip dhcp snooping verify mac-address
You can verify your settings by entering the show ip dhcp snooping privileged EXEC command.
Related Commands Command
show ip dhcp snooping
Cisco ME 3400 Ethernet Access Switch Command Reference
2-164
ip dhcp snooping verify mac-address
no ip dhcp snooping verify mac-address
Modification
This command was introduced.
Chapter 2 Cisco ME 3400 Ethernet Access Switch Cisco IOS Commands
Description
Displays the DHCP snooping configuration.
OL-9640-10