Edge-Core ECS4660-28F Management Manual page 1121

This command enables DHCP snooping on the specified VLAN. Use the no
ip dhcp snooping
form to restore the default setting.
vlan
S
D
Disabled
C
Global Configuration
C
◆
◆
◆
E
This example enables DHCP snooping for VLAN 1.
R
ip dhcp snooping (1116)
ip dhcp snooping trust (1123)
YNTAX
[no] ip dhcp snooping vlan vlan-id
vlan-id - ID of a configured VLAN (Range: 1-4094)
S
EFAULT ETTING
M
OMMAND ODE
U
OMMAND SAGE
When DHCP snooping is enabled globally using the
command, and enabled on a VLAN with this command, DHCP packet
filtering will be performed on any untrusted ports within the VLAN as
specified by the ip dhcp snooping trust
When the DHCP snooping is globally disabled, DHCP snooping can still
be configured for specific VLANs, but the changes will not take effect
until DHCP snooping is globally re-enabled.
When DHCP snooping is globally enabled, and then disabled on a
specific VLAN, all dynamic bindings learned for this VLAN are removed
from the binding table.
XAMPLE
Console(config)#ip dhcp snooping vlan 1
Console(config)#
C
ELATED OMMANDS
– 1121 –
| General Security Measures
C 29
HAPTER
DHCPv4 Snooping
ip dhcp snooping
command.