Table of Contents
Advertisement
Default Configuration
By default, no sources are blocked.
Command Modes
Interface Configuration mode (physical and port-channel)
User Guidelines
DHCP snooping should be enabled on any interfaces for which ipv6 verify
source is configured. If ipv6 verify source is configured on an interface for
which DHCP snooping is disabled, or for which DHCP snooping is enabled
and the interface is trusted, incoming traffic on the interface is dropped.
Traffic is filtered based on the source IP address and VLAN. When the port-
security keyword is configured, filtering occur based upon source IP address,
VLAN and source MAC address.
IP source guard also interacts with the port security component. Use the port
security command in interface mode to optionally add checking of learned
MAC addresses. When port security is enabled, MAC learning coordinates
with the IP Source Guard component to verify that the MAC address is in the
DHCP binding database. If it is not, port security is notified that the frame is
in violation of the security policy.
show ipv6 dhcp snooping
Use the show ipv6 dhcp snooping command to display the IPv6 DHCP
snooping configuration
Syntax
show ipv6 dhcp snooping
Default Configuration
This command has no default configuration.
Command Modes
User Exec, Privileged Exec (all show modes)
363
Layer 2 Switching Commands
Advertisement
Table of Contents
