Enabling Or Disabling Dhcp Snooping Mac Address Verification - Cisco Nexus 9000 Series Configuration Manual

Enabling or Disabling DHCP Snooping MAC Address Verification

Command or Action
switch# configure terminal
switch(config)#
Step 2 [no] ip dhcp snooping vlan vlan-list
Example:
switch(config)# ip dhcp snooping vlan
100,200,250-252
Step 3 (Optional) show running-config dhcp
Example:
switch(config)# show running-config dhcp
Step 4 (Optional) copy running-config startup-config
Example:
switch(config)# copy running-config startup-config
Enabling or Disabling DHCP Snooping MAC Address Verification
You can enable or disable DHCP snooping MAC address verification. If the device receives a packet on an
untrusted interface and the source MAC address and the DHCP client hardware address do not match, address
verification causes the device to drop the packet. MAC address verification is enabled by default.
Before you begin
Make sure that the DHCP feature is enabled.
SUMMARY STEPS
1. configure terminal
2. [no] ip dhcp snooping verify mac-address
3. (Optional) show running-config dhcp
4. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
switch# config t
switch(config)#
Step 2 [no] ip dhcp snooping verify mac-address
Example:
switch(config)# ip dhcp snooping verify mac-address
Step 3 (Optional) show running-config dhcp
Example:
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
340
Purpose
Enables DHCP snooping on the VLANs specified by
vlan-list. The no form of this command disables DHCP
snooping on the VLANs specified.
Displays the DHCP configuration.
Copies the running configuration to the startup
configuration.
Purpose
Enters global configuration mode.
Enables DHCP snooping MAC address verification. The
no form of this command disables MAC address
verification.
Displays the DHCP configuration.
Configuring DHCP