beautypg.com

9 dhcp snooping vlan – CANOGA PERKINS 9175 Command Reference User Manual

Page 634

background image

CanogaOS Command Reference

36-7


Usage

In a service-provider network, when a switch receives a packet from a DHCP client on an untrusted port,

it automatically verifies that the source MAC address and the DHCP client hardware address match. If

the addresses match, the switch forwards the packet. If the addresses do not match, the switch drops

the packet.


Examples

This example shows how to disable the MAC address verification:

Switch(config)# no dhcp snooping verify mac-address


Related Commands

show dhcp snooping config

show dhcp snooping binding

36.9 dhcp snooping vlan

Use the dhcp snooping vlan global configuration command on the switch to enable DHCP snooping on

a VLAN. Use the no form of this command to return to the default setting.


Command Syntax

dhcp snooping vlan vlan-range

no dhcp snooping vlan vlan-range

vlan-range

Specify a VLAN ID or a range of VLANs on which to enable DHCP snooping.

The range is 1 to 4094.

You can enter a single VLAN ID identified by VLAN ID number, a series of VLAN

IDs separated by commas, a range of VLAN IDs separated by hyphens, or a

range of VLAN IDs separated by entering the starting and ending VLAN IDs

separated by a space.

Default

DHCP snooping is disabled on all VLANs.


Command Mode

Global configuration


Usage

You must first globally enable DHCP snooping before enabling DHCP snooping on a VLAN.


Examples

This example shows how to enable DHCP snooping on VLAN 10:

Switch(config)# dhcp snooping vlan 10


Related Commands