Dhcp Snooping Commands; Table 22-4 Dhcp Snooping Commands - Edge-Core ES3528-WDM Management Manual

DHCP Snooping Commands

DHCP snooping allows a switch to protect a network from rogue DHCP servers or
other devices which send port-related information to a DHCP server. This
information can be useful in tracking an IP address back to a physical port. This
section describes commands used to configure DHCP snooping.
Command Function
ip dhcp snooping Enables DHCP snooping globally
ip dhcp snooping Enables DHCP snooping on the specified VLAN
vlan
ip dhcp snooping Adds a static address to the DHCP snooping table
binding
ip dhcp snooping Verifies the client's hardware address stored in the DHCP packet
verify mac-address against the source MAC address in the Ethernet header
ip dhcp snooping Writes all dynamically learned snooping entries to flash memory
database flash
ip dhcp snooping Configures the specified interface as trusted
trust
show ip dhcp Shows the DHCP snooping configuration settings
snooping
show ip dhcp Shows the DHCP snooping binding table entries
snooping binding
ip dhcp snooping
This command enables DHCP snooping globally. Use the no form to restore the
default setting.
Syntax
[no] ip dhcp snooping
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
• Network traffic may be disrupted when malicious DHCP messages are
received from an outside source. DHCP snooping is used to filter DHCP
messages received on an unsecure interface from outside the network or
firewall. When DHCP snooping is enabled globally by this command, and
enabled on a VLAN interface by the ip dhcp snooping vlan command
(page 22-9), DHCP messages received on an untrusted interface (as
specified by the no ip dhcp snooping trust command, page 22-12) from a
device not listed in the DHCP snooping table will be dropped.

Table 22-4 DHCP Snooping Commands

DHCP Snooping Commands
22
Mode Page
GC 22-7
GC 22-9
GC 22-10
GC 22-11
GC 22-12
IC 22-12
PE 22-13
PE 22-12
22-7