Ip dhcp snooping verify mac-address – Edge Products ES3528-WDM User Manual

Page 381

Advertising
background image

DHCP Snooping Commands

22-11

22

- If there is a binding with same VLAN ID and MAC address, and the entry

type is static IP source guard binding, static DHCP snooping binding, or
dynamic DHCP snooping binding, the new entry will replace the old one.

• When the lease time for a dynamic or static DHCP binding entry expires, it is

removed from the binding table.

Example
This example configures a static DHCP binding entry on port 5, and sets the lease
time to make it a permanent entry.

Related Commands

ip dhcp snooping (22-7)
ip dhcp snooping vlan (22-9)
ip dhcp snooping trust (22-12)

ip dhcp snooping verify mac-address

This command verifies the client’s hardware address stored in the DHCP packet
against the source MAC address in the Ethernet header. Use the no form to disable
this function.

Syntax

[no] ip dhcp binding verify mac-address

Default Setting

Enabled

Command Mode

Global Configuration

Command Usage

If MAC address verification is enabled, and the source MAC address in the
Ethernet header of the packet is not same as the client’s hardware address in
the DHCP packet, the packet is dropped.

Example
This example enables MAC address verification.

Related Commands

ip dhcp snooping (22-7)
ip dhcp snooping vlan (22-9)
ip dhcp snooping trust (22-12)

Console(config)#ip dhcp snooping binding 11-22-33-44-55-66 vlan 1

192.168.0.99 interface ethernet 1/5 0

Console(config-if)#

Console(config)#ip dhcp snooping verify mac-address
Console(config)#

Advertising
This manual is related to the following products: