Allied Telesis AT-8100 Series - Manual (Page 660)

Chapter 44: DHCP Snooping Commands
660
IP DHCP VERIFY MAC-ADDRESS
Syntax
ip dhcp verify mac-address
Parameters
None
Mode
Global Configuration mode
Description
Use this command to verify that the source MAC address and client
hardware address match in DHCP packets received on untrusted ports.
By default, this command is enabled.
When MAC address verification is enabled, the switch treats DHCP
packets with source MAC address and client hardware addresses that do
not match as DHCP snooping violations. It drops them and applies any
other violation action specified by the IP DHCP SNOOPING VIOLATION
command. See “IP DHCP SNOOPING VIOLATION” on page 662.
Note
To bring the port up after any issues have been resolved, use the
NO SHUTDOWN command. See “NO SHUTDOWN” on page 224.
Use the no version of the command, NO IP DHCP SNOOPNG VERIFY
MAC-ADDRESS command, to disable source MAC address verification.
Confirmation Commands
“IP DHCP SNOOPING VIOLATION” on page 662
“SHOW RUNNING-CONFIG” on page 170
“SHOW IP DHCP SNOOPING” on page 674
Examples
This example enables MAC address verification on untrusted ports:
awplus> enable
awplus# configure terminal
awplus(config)# ip dhcp verify mac-address