9 dhcp snooping vlan – CANOGA PERKINS 9175 Command Reference User Manual
Page 634
CanogaOS Command Reference
36-7
Usage
In a service-provider network, when a switch receives a packet from a DHCP client on an untrusted port,
it automatically verifies that the source MAC address and the DHCP client hardware address match. If
the addresses match, the switch forwards the packet. If the addresses do not match, the switch drops
the packet.
Examples
This example shows how to disable the MAC address verification:
Switch(config)# no dhcp snooping verify mac-address
Related Commands
show dhcp snooping config
show dhcp snooping binding
36.9 dhcp snooping vlan
Use the dhcp snooping vlan global configuration command on the switch to enable DHCP snooping on
a VLAN. Use the no form of this command to return to the default setting.
Command Syntax
dhcp snooping vlan vlan-range
no dhcp snooping vlan vlan-range
vlan-range
Specify a VLAN ID or a range of VLANs on which to enable DHCP snooping.
The range is 1 to 4094.
You can enter a single VLAN ID identified by VLAN ID number, a series of VLAN
IDs separated by commas, a range of VLAN IDs separated by hyphens, or a
range of VLAN IDs separated by entering the starting and ending VLAN IDs
separated by a space.
Default
DHCP snooping is disabled on all VLANs.
Command Mode
Global configuration
Usage
You must first globally enable DHCP snooping before enabling DHCP snooping on a VLAN.
Examples
This example shows how to enable DHCP snooping on VLAN 10:
Switch(config)# dhcp snooping vlan 10
Related Commands