Configuring All Interfaces As Trusted Or Untrusted - Cisco Nexus 9000 Series Configuration Manual

Configuring DHCP
Command or Action
Step 3 [no] ip dhcp relay information trusted
Example:
switch(config-if)# ip dhcp relay information
trusted
Step 4 (Optional) show ip dhcp relay information
trusted-sources
Example:
switch(config-if)# show ip dhcp relay information
trusted-sources
Step 5 (Optional) show running-config dhcp
Example:
switch(config-if)# show running-config dhcp
Step 6 (Optional) copy running-config startup-config
Example:
switch(config-if)# copy running-config
startup-config

Configuring all Interfaces as Trusted or Untrusted

You can configure all Layer 3 interfaces as DHCP relay trusted or untrusted interfaces. By default, all interfaces
are untrusted. You can configure DHCP relay trust on the following types of interfaces:
• Layer 3 Ethernet interfaces and subinterfaces
• Layer 3 port-channel interfaces
When you enable the ip dhcp relay information trust-all command, any Layer 3 interface cannot be considered
as untrusted irrespective of the interface-level configuration.
Before you begin
Make sure that the DHCP feature is enabled.
SUMMARY STEPS
1. configure terminal
2. [no] ip dhcp relay information trust-all
3. (Optional) show ip dhcp relay information trusted-sources
Purpose
Configures the interface as a trusted interface for DHCP
relay agent information. The no form of this command
configures the port as an untrusted interface.
Note For any Layer 3 interface, if the interface is
configured as trusted either through a global
command or an interface-level command, the
interface is considered as a trusted interface.
Hence, when the trusted-port command is
enabled at the global level, any Layer 3 interface
cannot be considered as untrusted irrespective
of the interface-level configuration.
Displays the DHCP relay trusted ports configuration.
Displays the DHCP configuration.
Copies the running configuration to the startup
configuration.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Configuring all Interfaces as Trusted or Untrusted
347