Ip Dhcp Snooping Verify - Cisco Catalyst 2960 Command Reference Manual

Hide thumbs Also See for Catalyst 2960:
Table of Contents

Advertisement

Chapter 2
Catalyst 2960 Switch Cisco IOS Commands

ip dhcp snooping verify

Use the ip dhcp snooping verify global configuration command to configure the switch to verify on an
untrusted port that the source MAC address in a DHCP packet matches the client hardware address. Use
the no form of this command to configure the switch to not verify the MAC addresses.
Syntax Description
This command has no arguments or keywords.
Defaults
The switch verifies the source MAC address in a DHCP packet that is received on untrusted ports
matches the client hardware address in the packet.
Command Modes
Global configuration
Command History
Release
12.2(25)FX
Usage Guidelines
In a service-provider network, when a switch receives a packet from a DHCP client on an untrusted port,
it automatically verifies that the source MAC address and the DHCP client hardware address match. If
the addresses match, the switch forwards the packet. If the addresses do not match, the switch drops the
packet.
Examples
This example shows how to disable the MAC address verification:
Switch(config)# no ip dhcp snooping verify mac-address
You can verify your settings by entering the show ip dhcp snooping user EXEC command.
Related Commands
Command
show ip dhcp snooping
OL-8604-03
ip dhcp snooping verify mac-address
no ip dhcp snooping verify mac-address
Modification
This command was introduced.
Description
Displays the DHCP snooping configuration.
Catalyst 2960 Switch Command Reference
ip dhcp snooping verify
2-137

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents