DHCP S
NOOPING
C
OMMANDS
23-21
When DHCP snooping is globally enabled, configuration changes for
specific VLANs have the following effects:
- If DHCP snooping is disabled on a VLAN, all dynamic bindings
learned for this VLAN are removed from the binding table.
Example
This example enables DHCP snooping for VLAN 1.
Related Commands
ip dhcp snooping (23-18)
ip dhcp snooping trust (23-24)
ip dhcp snooping verify mac-address
This command verifies the client’s hardware address stored in the DHCP
packet against the source MAC address in the Ethernet header. Use the no
form to disable this function.
Syntax
[no] ip dhcp binding verify mac-address
Default Setting
Enabled
Command Mode
Global Configuration
Command Usage
If MAC address verification is enabled, and the source MAC address in
the Ethernet header of the packet is not same as the client’s hardware
address in the DHCP packet, the packet is dropped.
Example
This example enables MAC address verification.
Console(config)#ip dhcp snooping vlan 1
Console(config)#
Console(config)#ip dhcp snooping verify mac-address
Console(config)#