This command enables DHCP snooping on the specified VLAN. Use the no
ip dhcp snooping
form to restore the default setting.
vlan
S
D
Disabled
C
Global Configuration
C
◆
◆
◆
E
This example enables DHCP snooping for VLAN 1.
R
ip dhcp snooping (910)
ip dhcp snooping trust (917)
YNTAX
[no] ip dhcp snooping vlan vlan-id
vlan-id - ID of a configured VLAN (Range: 1-4093)
S
EFAULT
ETTING
M
OMMAND
ODE
U
OMMAND
SAGE
When DHCP snooping enabled globally using the
command, and enabled on a VLAN with this command, DHCP packet
filtering will be performed on any untrusted ports within the VLAN as
specified by the
ip dhcp snooping trust
When the DHCP snooping is globally disabled, DHCP snooping can still
be configured for specific VLANs, but the changes will not take effect
until DHCP snooping is globally re-enabled.
When DHCP snooping is globally enabled, and then disabled on a VLAN,
all dynamic bindings learned for this VLAN are removed from the
binding table.
XAMPLE
Console(config)#ip dhcp snooping vlan 1
Console(config)#
C
ELATED
OMMANDS
– 915 –
| General Security Measures
C
27
HAPTER
DHCPv4 Snooping
ip dhcp snooping
command.