11-5
Configuring Advanced Threat Protection
DHCP Snooping
Enabling DHCP Snooping
DHCP snooping is enabled globally by entering this command:
HP Switch(config)# dhcp-snooping
Use the no form of the command to disable DHCP snooping.
To display the DHCP snooping configuration, enter this command:
HP Switch(config)# show dhcp-snooping
An example of the output is shown below.
Syntax: [no] dhcp-snooping [authorized-server | database | option | trust | verify |
vlan]
authorized server: Enter the IP address of a trusted DHCP
server. If no authorized servers are configured, all DHCP
server addresses are considered valid.
Maximum: 20 authorized servers
database: To configure a location for the lease database,
enter a URL in the format tftp://ip-addr/ascii-string. The
maximum number of characters for the URL is 63.
option
: Add relay information option (Option 82) to DHCP
client packets that are being forwarded out trusted ports.
The default is
yes, add relay information.
trust
: Configure trusted ports. Only server packets received
on trusted ports are forwarded. Default: untrusted.
verify
: Enables DHCP packet validation. The DHCP client
hardware address field and the source MAC address must
be the same for packets received on untrusted ports or the
packet is dropped. Default:
Yes
vlan
: Enable DHCP snooping on a vlan. DHCP snooping
must be enabled already. Default:
No
To Next Page
Loading...
Need help?
General