190 Cisco LAN Switching Configuration Handbook
2. Configure the interface connected to the DHCP server as trusted:
switch(config)# interface fastEthernet 1/0/3
switch(config-if)# ip dhcp snooping trust
Verification
1. Display the DHCP Snooping configuration for the switch:
switch# show ip dhcp snooping
Switch DHCP snooping is enabled
DHCP snooping is configured on following VLANs:1
Insertion of option 82 is disabled
Option 82 on untrusted port is not allowed
Verification of hwaddr field is enabled
Interface Trusted Rate limit (pps)
———————————— ———- ————————
FastEthernet1/0/3 yes unlimited
2. Display the DHCP Snooping binding entries for the switch:
switch# show ip dhcp snooping binding
MacAddress IpAddress Lease Type VLAN Interface
(sec)
————————— ————— ——— ——————- —— ———————
00:11:85:A5:7B:F5 10.0.0.2 86391 dhcp-snooping 1 FastEthernet1/0/1
00:11:85:8D:9A:F9 10.0.0.3 86313 dhcp-snooping 1 FastEthernet1/0/2
Total number of bindings: 2
Note DHCP servers connected to the untrusted port cannot assign IP addresses to the
clients.