DHCP Snooping Commands 367
Example
console(config-if-1/0/1)#ip dhcp snooping log-invalid
console(config-if-1/0/1)#no ip dhcp snooping log-invalid
ip dhcp snooping trust
Use the ip dhcp snooping trust command to configure a port as trusted. Use
the “no” form of this command to configure a port as untrusted.
Syntax
ip dhcp snooping trust
no ip dhcp snooping trust
Default Configuration
Ports are untrusted by default.
Command Mode
Interface Configuration (gigabitethernet, port-channel, tengigabitethernet,
fortygigabitethernet) mode
User Guidelines
Interfaces connected to the DHCP server must be configured as trusted in
order for DHCP snooping to operate.
Example
console(config-if-1/0/1)#ip dhcp snooping trust
console(config-if-1/0/1)#no ip dhcp snooping trust
ip dhcp snooping verify mac-address
Use the ip dhcp snooping verify mac-address command to enable the
verification of the source MAC address with the client MAC address in the
received DHCP message. Use the “no” form of this command to disable
verification of the source MAC address.
2CSPC4.X8100-SWUM102.book Page 367 Friday, March 15, 2013 8:56 AM