Chapter 9
| General Security Measures
DHCPv4 Snooping
– 274 –
ip dhcp snooping
This command enables DHCP snooping globally. Use the
no
form to restore
the default setting.
Syntax
[
no
]
ip dhcp snooping
Default Setting
Disabled
Command Mode
Global Configuration
Command Usage
◆
Network traffic may be disrupted when malicious DHCP messages are
received from an outside source. DHCP snooping is used to filter DHCP
messages received on an unsecure interface from outside the network or
fire wall. When DHCP snooping is enabled globally by this command, and
enabled on a VLAN interface by the
command,
DHCP messages received on an untrusted interface (as specified by the
no
command) from a device not listed in the DHCP
snooping table will be dropped.
◆
When enabled, DHCP messages entering an untrusted interface are
filtered based upon dynamic entries learned via DHCP snooping.
Enables or disables the use of DHCP Option 82
information circuit-id suboption
IC
Configures the specified interface as trusted
IC
configures the maximum number of DHCP clients
which can be supported per interface
IC
Enables or disables the use of DHCP Option 82
information circuit-id suboption
IC
Configures the specified interface as trusted
IC
Clears DHCP snooping binding table entries from
RAM
PE
Removes all dynamically learned snooping entries
from flash memory.
PE
Writes all dynamically learned snooping entries to
flash memory
PE
Shows the DHCP snooping configuration settings
PE
Shows the DHCP snooping binding table entries
PE
Table 54: DHCP Snooping Commands
(Continued)
Command
Function
Mode
Содержание SC30010
Страница 1: ...C 300 Series Gigabit Managed Switch CLI Reference Guide SOFTWARE RELEASE V1 1 10 171 www signamax com ...
Страница 2: ...CLI Reference Guide SC30010 C 300 48 Port Gigabit Managed Switch E122017 KS R01 ...
Страница 482: ...Chapter 19 Class of Service Commands Priority Commands Layer 3 and 4 482 ...
Страница 670: ......
Страница 671: ...E122017 KS R01 ...