Korenix JetNet 5228G Series, User Manual

Page: 157 / 658

Client Security
3-111
3
Configuring DHCP Snooping
Use the DHCP Snooping Configuration page to enable DHCP Snooping globally on
the switch, or to configure MAC Address Verification.
Command Attributes
• DHCP Snooping Status – Enables DHCP snooping globally. (Default: Disabled)
• DHCP Snooping MAC-Address Verification – Enables or disables MAC address
verification. DHCP packets will be dropped if the source MAC address in the
Ethernet header of the packet is not same as the client’s hardware address in the
DHCP packet.
Web – Click DHCP Snooping, Configuration. Select the required options and click
Apply.
Figure 3-66 DHCP Snooping Configuration
CLI – This example first enables DHCP Snooping, and then enables DHCP
Snooping MAC-Address Verification.
Configuring VLANs for DHCP Snooping
Enables DHCP snooping on the specified VLAN.
Command Usage
• When DHCP snooping is enabled globally on the switch, and enabled on the
specified VLAN, DHCP packet filtering will be performed on any untrusted ports
within the VLAN.
• When the DHCP snooping is globally disabled, DHCP snooping can still be
configured for specific VLANs, but the changes will not take effect until DHCP
snooping is globally re-enabled.
• When DHCP snooping is globally enabled, and DHCP snooping is then disabled
on a VLAN, all dynamic bindings learned for this VLAN are removed from the
binding table.
Console(config)#ip dhcp snooping 4-146
Console(config)#ip dhcp snooping verify mac-address 4-150
Console(config)#