Service Dhcp-Snooping - Centrecom FS980M/9 Command Reference Manual

DHCP S C
NOOPING OMMANDS
-
SERVICE DHCP SNOOPING

service dhcp-snooping

Overview Use this command to enable the DHCP snooping service globally on the switch.
This must be enabled before other DHCP snooping configuration commands can
be entered.
Use the no variant of this command to disable the DHCP snooping service on the
switch. This removes all DHCP snooping configuration from the running
configuration, except for any DHCP snooping maximum bindings settings
snooping max-bindings
Control Lists (ACLs), which are retained when the service is disabled.
service dhcp-snooping
Syntax
no service dhcp-snooping
Default DHCP snooping is disabled on the switch by default.
Mode Global Configuration
Usage For DHCP snooping to operate on a VLAN, it must be enabled on the switch by
using this command, and also enabled on the particular VLAN by using the
snooping
For DHCP snooping to operate on a VLAN, it must:
•
•
•
If you disable the DHCP snooping service by using the no variant of this command,
all DHCP snooping configuration (including ARP security, but excluding maximum
bindings and ACLs) is removed from the running configuration, and the DHCP
snooping database is deleted from active memory. If you re-enable the service, the
switch repopulates the DHCP snooping database from the dynamic lease entries
in the database backup file (in NVS by default—see the
command). The lease expiry times are updated.
The DHCP snooping service cannot be enabled on a switch that is configured with
any of the following features, or vice versa:
•
•
•
Any ACLs on a port that permit traffic matching DHCP snooping entries and block
other traffic, will block all traffic if DHCP snooping is disabled on the port. If you
disable DHCP snooping on the switch using this command, you must also remove
any DHCP snooping ACLs from the ports to maintain connectivity (no
access-group
613-50137-01 Rev A
command), and any DHCP snooping-based Access
command.
be enabled globally on the switch by using this command
be enabled on the particular VLAN by using the
have at least one port connected to a DHCP server configured as a trusted
port by using the ip dhcp snooping trust
web authentication (auth-web enable
roaming authentication
disconnected command)
guest VLAN authentication
command).
Command Reference for FS980M Series
AlliedWare Plus™ Operating System - Version 5.4.6-2.x
command
command)
(auth roaming enable command,
(auth guest-vlan command).
(ip dhcp
ip dhcp
ip dhcp snooping command
ip dhcp snooping database
auth roaming
1187