DHCP Snooping
© Copyright Lenovo 2017
DHCP Snooping provides security by filtering untrusted DHCP packets and by
maintaining a binding table of trusted interfaces.
Table 350.
DHCP Snooping Options
Command Syntax and Usage
[no] ip dhcp snooping
Enables or disables DHCP Snooping.
Command mode: Global configuration
ip dhcp snooping binding <MAC address> vlan <VLAN ID (1‐4094)>
<IP address> port <port alias or number> expiry <1‐4294967295>
Adds a manual entry to the binding table.
Command mode: Global configuration
no ip dhcp snooping binding {<MAC address>|all
[interface port <port alias or number>|vlan <VLAN ID (1‐4094)>]}
Removes an entry from the binding table.
Command mode: Global configuration
[no] ip dhcp snooping information optioninsert
Enables or disables option 82 support for DHCP Snooping.
When enabled, DHCP Snooping performs the following functions:
if a DHCP packet from a client contains option 82 information, the
information is retained.
when DHCP Snooping forwards a DHCP packet from a client, option 82
information is added to the packet.
when DHCP snooping forward a DHCP packet from a server, option 82
information is removed from the packet.
Command mode: Global configuration
[no] ip dhcp snooping vlan <VLAN ID (1‐4094)>
Adds or removes the selected VLAN to DHCP Snooping. Member ports
participate in DHCP Snooping.
Command mode: Global configuration
show ip dhcp snooping
Displays the current DHCP Snooping parameters.
Command mode: All
Chapter 4: Configuration Commands
625