Edge-Core ECS4660-28F, Management Manual, Page: 1115 / 2020

C
HAPTER
29
| General Security Measures
DHCPv4 Snooping
– 1115 –
show web-auth
summary
This command displays a summary of web authentication port parameters
and statistics.
C
OMMAND
M
ODE
Privileged Exec
E
XAMPLE
Console#show web-auth summary
Global Web-Auth Parameters
System Auth Control : Enabled
Port Status Authenticated Host Count
---- ------ ------------------------
1/ 1 Disabled 0
1/ 2 Enabled 8
1/ 3 Disabled 0
1/ 4 Disabled 0
1/ 5 Disabled 0
.
.
.
DHCP
V
4 S
NOOPING
DHCPv4 snooping allows a switch to protect a network from rogue DHCPv4
servers or other devices which send port-related information to a DHCPv4
server. This information can be useful in tracking an IP address back to a
physical port. This section describes commands used to configure DHCPv4
snooping.
Table 118: DHCP Snooping Commands
Command Function Mode
ip dhcp snooping Enables DHCP snooping globally GC
ip dhcp snooping
information option
Enables or disables the use of DHCP Option 82
information, and specifies frame format for the
remote-id
GC
ip dhcp snooping
information policy
Sets the information option policy for DHCP client
packets that include Option 82 information
GC
ip dhcp snooping verify
mac-address
Verifies the client’s hardware address stored in the
DHCP packet against the source MAC address in the
Ethernet header
GC
ip dhcp snooping vlan Enables DHCP snooping on the specified VLAN GC
ip dhcp snooping
information option circuit-id
Specifies DHCP Option 82 circuit-id suboption
information
IC
ip dhcp snooping trust Configures the specified interface as trusted IC
clear ip dhcp snooping
binding
Clears DHCP snooping binding table entries from
RAM
PE
clear ip dhcp snooping
database flash
Removes all dynamically learned snooping entries
from flash memory.
PE
ip dhcp snooping database
flash
Writes all dynamically learned snooping entries to
flash memory
PE