To enable the L2 DHCP snooping in the switch globally or in the specific VLAN or DHCP MAC verification in the switch, use the command ip dhcp snooping in Global Configuration Mode. The no form of the command globally disables Layer 2 DHCP snooping in the switch or disables DHCP snooping in the specific VLAN. The DHCP snooping module will stop the protocol operation when the snooping is globally disabled.
| Parameter | Type | Description |
|---|---|---|
vlan
|
Enter to configure L2 DHCP snooping in the specific VLAN. The DHCP snooping module will start the protocol operation when the snooping is enabled globally. | |
<vlan-id (1-4094)>
|
Integer | Enter a VLAN ID for the L2 DHCP snooping to be configured. This is a unique value that represents the specific VLAN created. This value ranges from 1 to 4094. |
verify
|
Enter to enable globally DHCP MAC verification in the switch. | |
mac-address
|
Enter to start MAC Address verification. If the MAC verification status is enabled, DHCP snooping module will verify whether the source Mac address and client hardware Mac address are same. If they are same, packet will be processed further; else, it is dropped. |
Global Configuration Mode
iS5Comm(config)# ip dhcp snooping vlan 2
The example used and the ip dhcp snooping command used in the config-vlan mode serve the same purpose.
iS5Comm (config)# ip dhcp snooping verify mac-address