DHCP S
NOOPING

C

OMMANDS

23-17

DHCP Snooping Commands

DHCP snooping allows a switch to protect a network from rogue DHCP

servers or other devices which send port-related information to a DHCP

server. This information can be useful in tracking an IP address back to a

physical port. This section describes commands used to configure DHCP

snooping.

Table 23-5 DHCP Snooping Commands
Command Function Mode Page
ip dhcp
snooping
Enables DHCP snooping globally GC 23-18
ip dhcp
snooping vlan
Enables DHCP snooping on the specified
VLAN
GC 23-20
ip dhcp
snooping verify
mac-address
Verifies the client’s hardware address stored in
the DHCP packet against the source MAC
address in the Ethernet header
GC 23-21
ip dhcp
snooping
database write
Writes all dynamically learned snooping entries
to flash memory
GC 23-22
ip dhcp
snooping
service-provider-
mode
Converts the IP address assigned to a host by a
DHCP server to a static entry, and registers the
host as a valid entry in the DHCP snooping table
GC 23-22
ip dhcp
snooping client
limit
Limits the number of host devices which can be
attached to a VDSL port
IC 23-23
ip dhcp
snooping trust
Configures the specified interface as trusted IC 23-24
show ip dhcp
snooping
Shows the DHCP snooping configuration
settings
PE 23-25
show ip dhcp
snooping
binding
Shows the DHCP snooping binding table entries PE 23-26