Allied Telesis AT-FS970M Series - Manual (Page 638)

Chapter 42: DHCP Snooping Commands
638
IP DHCP VERIFY MAC-ADDRESS
Syntax
ip dhcp verify mac-address
Parameters
None
Mode
Global Configuration mode
Description
Use this command to verify that the source MAC address and client
hardware address match in DHCP packets received on untrusted ports.
By default, this command is enabled.
When MAC address verification is enabled, the switch treats DHCP
packets with source MAC address and client hardware addresses that do
not match as DHCP snooping violations. It drops them and applies any
other violation action specified by the IP DHCP SNOOPING VIOLATION
command. See “IP DHCP SNOOPING VIOLATION” on page 640.
Note
To bring the port up after any issues have been resolved, use the
NO SHUTDOWN command. See “NO SHUTDOWN” on page 219.
Use the no version of the command, NO IP DHCP SNOOPNG VERIFY
MAC-ADDRESS command, to disable source MAC address verification.
Confirmation Commands
“IP DHCP SNOOPING VIOLATION” on page 640
“SHOW RUNNING-CONFIG” on page 166
“SHOW IP DHCP SNOOPING” on page 652
Examples
This example enables MAC address verification on untrusted ports:
awplus> enable
awplus# configure terminal
awplus(config)# ip dhcp verify mac-address