General Security Measures

4-137

4

ip dhcp snooping information policy

This command sets the DHCP snooping information option policy for DHCP client
packets that include Option 82 information.
Syntax
ip dhcp snooping information policy {drop | keep | replace}
drop - Drops the client’s request packet instead of relaying it.
keep - Retains the Option 82 information in the client request, and forwards
the packets to trusted ports.
replace - Replaces the Option 82 information in the client’s request with
information about the relay agent itself, inserts the relay agent’s address
(when DHCP snooping is enabled), and forwards the packets to trusted
ports.
Default Setting
replace
Command Mode
Global Configuration
Command Usage
When the switch receives DHCP packets from clients that already include
DHCP Option 82 information, the switch can be configured to set the action
policy for these packets. The switch can drop the DHCP packets, keep the
existing information, or replace it with the switch’s relay information.
Example
Console(config)#ip dhcp snooping information policy drop
Console(config)#