Ip dhcp snooping verify mac-address – LevelOne FGL-2870 User Manual

Page 548

Advertising
background image

Command Line Interface

4-182

4

Additional considerations when the switch itself is a DHCP client – The port(s)

through which it submits a client request to the DHCP server must be
configured as trusted.

Example
This example sets port 5 to untrusted.

Related Commands

ip dhcp snooping (4-179)
ip dhcp snooping vlan (4-180)

ip dhcp snooping verify mac-address

This command verifies the client’s hardware address stored in the DHCP packet
against the source MAC address in the Ethernet header. Use the no form to disable
this function.

Syntax

[no] ip dhcp snooping verify mac-address

Default Setting

Enabled

Command Mode

Global Configuration

Command Usage

If MAC address verification is enabled, and the source MAC address in the
Ethernet header of the packet is not same as the client’s hardware address in
the DHCP packet, the packet is dropped.

Example
This example enables MAC address verification.

Related Commands

ip dhcp snooping (4-179)
ip dhcp snooping vlan (4-180)
ip dhcp snooping trust (4-181)

Console(config)#interface ethernet 1/5
Console(config-if)#no ip dhcp snooping trust
Console(config-if)#

Console(config)#ip dhcp snooping verify mac-address
Console(config)#

Advertising