beautypg.com

Dhcp snooping vlan configuration, Figure 3-85 – LevelOne FGL-2870 User Manual

Page 199

background image

General Security Measures

3-145

3

DHCP Snooping VLAN Configuration

Use the DHCP Snooping VLAN Configuration page to enable or disable DHCP
snooping on specific VLANs.

Command Usage
• When DHCP snooping is enabled globally on the switch, and enabled on the

specified VLAN, DHCP packet filtering will be performed on any untrusted ports
within the VLAN.

• When the DHCP snooping is globally disabled, DHCP snooping can still be

configured for specific VLANs, but the changes will not take effect until DHCP
snooping is globally re-enabled.

• When DHCP snooping is globally enabled, and DHCP snooping is then disabled

on a VLAN, all dynamic bindings learned for this VLAN are removed from the
binding table.

Command Attributes
VLAN ID – ID of a configured VLAN. (Range: 1-4094)
DHCP Snooping Status – Enables or disables DHCP snooping for the selected

VLAN. When DHCP snooping is enabled globally on the switch, and enabled on
the specified VLAN, DHCP packet filtering will be performed on any untrusted ports
within the VLAN.

Web – Click DHCP Snooping, VLAN Configuration.

Figure 3-85 DHCP Snooping VLAN Configuration

CLI – This example first enables DHCP Snooping for VLAN 1.

Console(config)#ip dhcp snooping vlan 1

4-180

Console(config)#