Ip Dhcp Snooping Verify - Cisco 300 Series Cli Manual

42
684
Default Configuration
DHCP packets with option-82 information from an untrusted port are discarded.
Command Mode
Global Configuration mode
Example
The following example allows a device to accept DHCP packets with option-82
information from an untrusted port.
switchxxxxxx(config)#
42.5

ip dhcp snooping verify

Use the ip dhcp snooping verify Global Configuration mode command to
configure a device to verify that the source MAC address in a DHCP packet
received on an untrusted port matches the client hardware address. Use the no
form of this command to disable MAC address verification in a DHCP packet
received on an untrusted port.
Syntax
ip dhcp snooping verify
no ip dhcp snooping verify
Default Configuration
The switch verifies that the source MAC address in a DHCP packet received on an
untrusted port matches the client hardware address in the packet.
Command Mode
Global Configuration mode
Example
The following example configures a device to verify that the source MAC address
in a DHCP packet received on an untrusted port matches the client hardware
address.
switchxxxxxx(config)#
DHCP Snooping and ARP Inspection Commands
ip dhcp snooping information option allowed-untrusted
ip dhcp snooping verify
78-21075-01 Command Line Interface Reference Guide