DGS-6604
ip dhcp snooping vlan
CLI Reference Guide
248
ip dhcp snooping vlan
Use this command to enable DHCP snooping on a VLAN or a group of VLANs.
Use no command to disable DHCP snooping on a VLAN or a group of VLANs.
ip dhcp snooping vlan
VLAN-ID
[, | -]
no ip dhcp snooping vlan
VLAN-ID
[, | -]
Default
None
Command Mode
Global configuration mode
Usage Guideline
Use the ip dhcp snooping command to globally enable DHCP snooping and use
the ip dhcp snooping vlan command to enable DHCP snooping for a VLAN.
DHCP snooping process occurs during the relay agent relaying the packet.
The DHCP snooping function snoops the DHCP packets arriving at the un-
trusted interface on VLAN that is enabled for DHCP snooping. With this function,
the DHCP packets that come from an un-trusted interface can be validated, and
a DHCP binding database will be constructed for the DHCP snooping enabled
VLAN. The binding database provides IP and MAC binding information that can
be further used by the IP source guard and dynamic ARP inspection process.
The DHCP snooping enabled status for a secondary VLAN follows the status for
its primary VLAN. Thus, the DHCP snooping setting does not take effect if it is
configured on a secondary VLAN.
Example
This example shows how to enable DHCP snooping on vlan10:
Syntax Description
vlan
VLAN-ID
Specify the VLAN to enable or disable the DHCP snooping function.
,
(Optional) Specify a series of VLAN’s, or separate a range of VLAN’s from a
previous range. Enter a space before and after the comma.
-
(Optional) Specify a range of VLANs. Enter a pace before and after the hyphen.
Switch# configure terminal
Switch(config)# ip dhcp snooping vlan 10
Switch(config)#