154 DHCP Snooping
Syntax
•
ip dhcp snooping vlan
vlan-id
•
no ip dhcp snooping vlan
vlan-id
•
vlan-id
— Specifies the VLAN ID.
Default Configuration
The default configuration is disabled.
Command Mode
Global Configuration mode.
User Guidelines
• You must first globally enable DHCP snooping before enabling DHCP snooping on a VLAN.
Example
The following example enables DHCP snooping on VLAN 1000:
ip dhcp snooping trust
The ip dhcp snooping trust Interface Configuration (Ethernet, Port-channel) mode command
configures a port as trusted for DHCP snooping purposes. Use the no form of this command to return to
the default settings.
Syntax
• ip dhcp snooping trust
• no ip dhcp snooping trust
Default Configuration
The default configuration is that the interface is not trusted.
Command Mode
Interface Configuration (Ethernet, Port-channel) mode.
User Guidelines
• Configure as trusted ports those that are connected to a DHCP server or to other switches or routers.
Configure as untrusted ports those that are connected to DHCP clients.
console(config)# ip dhcp snooping vlan 1000
book.book Page 154 Thursday, December 18, 2008 7:40 PM