79
Description
Use the dhcp-snooping check mac-address command to enable MAC address check on a DHCP
snooping device.
Use the undo dhcp-snooping check mac-address command to disable MAC address check of DHCP
snooping.
By default, this function is disabled.
With this function enabled, the DHCP snooping device compares the chaddr field of a received DHCP
request with the source MAC address field in the frame. If they are the same, the DHCP snooping device
decides this request valid and forwards it to the DHCP server. If not, the DHCP request is discarded.
Examples
# Enable MAC address check of DHCP snooping.
<Sysname> system-view
[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] dhcp-snooping check mac-address
dhcp-snooping check request-message
Syntax
dhcp-snooping check request-message
undo dhcp-snooping check request-message
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
None
Description
Use the dhcp-snooping check request-message command to enable DHCP-REQUEST message check of
DHCP snooping.
Use the undo dhcp-snooping check request-message command to disable DHCP-REQUEST message
check of the DHCP snooping.
By default, this function is disabled.
With this function enabled, upon receiving a DHCP-REQUEST message, a DHCP snooping device
searches local DHCP snooping entries for the corresponding entry of the message. If an entry is found,
the DHCP snooping device compares the entry with the message information. If they are consistent, the
DHCP-REQUEST message is considered as valid lease renewal request and forwarded to the DHCP
server. If they are not consistent, the messages is considered as forged lease renewal request and
discarded. If no corresponding entry is found locally, the message is considered valid and forwarded to
the DHCP server.
Examples
# Enable DHCP-REQUEST message check of DHCP snooping.
<Sysname> system-view
To Next Page
Loading...
Need help?
General