Ip dhcp snooping verify mac-address, Ip dhcp snooping verify mac-address -16 – SMC Networks SMC TigerAccess SMC7824M/FSW User Manual

Page 510

Advertising
background image

C

LIENT

S

ECURITY

C

OMMANDS

22-16

• When the lease time for a dynamic or static DHCP binding entry

expires, it is removed from the binding table.

Example
This example configures a static DHCP binding entry on port 5, and sets
the lease time to make it a permanent entry.

Related Commands

ip dhcp snooping (22-11)
ip dhcp snooping vlan (22-13)
ip dhcp snooping trust (22-17)

ip dhcp snooping verify mac-address

This command verifies the client’s hardware address stored in the DHCP
packet against the source MAC address in the Ethernet header. Use the no
form to disable this function.

Syntax

[no] ip dhcp binding verify mac-address

Default Setting

Enabled

Command Mode

Global Configuration

Command Usage

If MAC address verification is enabled, and the source MAC address in
the Ethernet header of the packet is not same as the client’s hardware
address in the DHCP packet, the packet is dropped.

Example
This example enables MAC address verification.

Console(config)#ip dhcp snooping binding 11-22-33-44-55-66 vlan 1

192.168.0.99 interface ethernet 1/5 0

Console(config-if)#

Console(config)#ip dhcp snooping verify mac-address
Console(config)#

Advertising