CANOGA PERKINS CanogaOS Command Reference - Manual (Page 705)

CanogaOS Command Line Reference Revision 1.02
Proprietary & Confidential Canoga Pertkins Metro Ethernet Switches Page 705 of 855
Default
The switch verifies the source MAC address in a DHCP packet that is received on untrusted ports
matches the client hardware address in the packet.
Command Mode
Global configuration
Usage
In a service-provider network, when a switch receives a packet from a DHCP client on an untrusted
port, it automatically verifies that the source MAC address and the DHCP client hardware address
match. If the addresses match, the switch forwards the packet. If the addresses do not match, the
switch drops the packet.
Examples
This example shows how to disable the MAC address verification:
Switch(config)# no dhcp snooping verify mac-address
Related Commands
show dhcp snooping config
show dhcp snooping binding
36.9 dhcp snooping vlan
Use the dhcp snooping vlan global configuration command on the switch to enable DHCP snooping
on a VLAN. Use the no form of this command to return to the default setting.
Command Syntax
dhcp snooping vlan vlan-range
no dhcp snooping vlan vlan-range
vlan-range Specify a VLAN ID or a range of VLANs on which to enable DHCP snooping.
The range is 1 to 4094.
You can enter a single VLAN ID identified by VLAN ID number, a series of
VLAN IDs separated by commas, a range of VLAN IDs separated by hyphens,
or a range of VLAN IDs separated by entering the starting and ending VLAN
IDs separated by a space.
Default
DHCP snooping is disabled on all VLANs.
Command Mode
Global configuration