Ip dhcp snooping verify mac-address, Ip dhcp snooping verify mac-address -16 – SMC Networks SMC TigerAccess SMC7824M/FSW User Manual
Page 510

C
LIENT
S
ECURITY
C
OMMANDS
22-16
• When the lease time for a dynamic or static DHCP binding entry
expires, it is removed from the binding table.
Example
This example configures a static DHCP binding entry on port 5, and sets
the lease time to make it a permanent entry.
Related Commands
ip dhcp snooping (22-11)
ip dhcp snooping vlan (22-13)
ip dhcp snooping trust (22-17)
ip dhcp snooping verify mac-address
This command verifies the client’s hardware address stored in the DHCP
packet against the source MAC address in the Ethernet header. Use the no
form to disable this function.
Syntax
[no] ip dhcp binding verify mac-address
Default Setting
Enabled
Command Mode
Global Configuration
Command Usage
If MAC address verification is enabled, and the source MAC address in
the Ethernet header of the packet is not same as the client’s hardware
address in the DHCP packet, the packet is dropped.
Example
This example enables MAC address verification.
Console(config)#ip dhcp snooping binding 11-22-33-44-55-66 vlan 1
192.168.0.99 interface ethernet 1/5 0
Console(config-if)#
Console(config)#ip dhcp snooping verify mac-address
Console(config)#