Lenovo RackSwitch G8264, Command Reference Manual

Page: 625 / 794

© Copyright Lenovo 2017 Chapter 4: Configuration Commands
625
DHCP Snooping
DHCP Snooping provides security by filtering untrusted DHCP packets and by
maintaining a binding table of trusted interfaces.
Table 350.
DHCP Snooping Options
Command Syntax and Usage
[no] ip dhcp snooping
Enables or disables DHCP Snooping.
Command mode : Global configuration
ip dhcp snooping binding
<MAC address>
vlan
<VLAN ID (1 ‐ 4094)>
<IP address>
port
<port alias or number>
expiry
<1 ‐ 4294967295>
Adds a manual entry to the binding table.
Command mode : Global configuration
no ip dhcp snooping binding {
<MAC address>
|all
[interface port
<port alias or number>
|vlan
<VLAN ID (1 ‐ 4094)>
]}
Removes an entry from the binding table.
Command mode : Global configuration
[no] ip dhcp snooping information option ­ insert
Enables or disables option 82 support for DHCP Snooping.
When enabled, DHCP Snooping performs the following functions:

if a DHCP packet from a client contains option 82 information, the
information is retained.

when DHCP Snooping forwards a DHCP packet from a client, option 82
information is added to the packet.

when DHCP snooping forward a DHCP packet from a server, option 82
information is removed from the packet.
Command mode : Global configuration
[no] ip dhcp snooping vlan
<VLAN ID (1 ‐ 4094)>
Adds or removes the selected VLAN to DHCP Snooping. Member ports
participate in DHCP Snooping.
Command mode : Global configuration
show ip dhcp snooping
Displays the current DHCP Snooping parameters.
Command mode : All