Changing The Remote-Id From A Mac To An Ip Address; Disabling The Mac Address Check - HP ProCurve Switch 6120G/XG Manual

Hp procurve series 6120 blade switches access security guide
Hide thumbs Also See for ProCurve Switch 6120G/XG:
Table of Contents

Advertisement

Changing the Remote-id from a MAC to an IP Address

By default, DHCP snooping uses the MAC address of the switch as the remote-
id in Option 82 additions. The IP address of the VLAN the packet was received
on or the IP address of the management VLAN can be used instead by entering
this command with the associated parameter:
ProCurve(config)# dhcp-snooping option 82 remote-id
ProCurve(config)# dhcp-snooping option 82 remote-id subnet-
ip
ProCurve(config)# show dhcp-snooping
DHCP Snooping Information
DHCP Snooping
Enabled Vlans
Verify MAC
Option 82 untrusted policy : drop
Option 82 Insertion
Option 82 remote-id
Figure 8-6. Example of DHCP Snooping Option 82 using the VLAN IP Address

Disabling the MAC Address Check

DHCP snooping drops DHCP packets received on untrusted ports when the
check address (chaddr) field in the DHCP header does not match the source
MAC address of the packet (default behavior). To disable this checking, use
the no form of this command.
ProCurve(config)# dhcp-snooping verify mac
Configuring Advanced Threat Protection
<mac|subnet-ip|mgmt-ip>
: Yes
: 4
: Yes
: Yes
: subnet-ip
DHCP Snooping
8-11

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Procurve switch 6120xgProcurve 6120 series

Table of Contents