CLI Guide
Commands to Congure Secure DHCP
DHCP, as dened by RFC 2131, provides no authentication or security mechanisms. Secure DHCP is a suite of features that protects
networks that use dynamic address allocation from spoong and attacks.
arp inspection
Enable dynamic arp inspection (DAI) on a VLAN.
Syntax
arp inspection
Defaults Disabled
Command Modes INTERFACE VLAN
Supported Modes Full–Switch
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Related Commands arp inspection-trust — species a port as trusted so that ARP frames are not validated against the binding table.
arp inspection-trust
Specify a port as trusted so that ARP frames are not validated against the binding table.
Syntax
arp inspection-trust
Defaults Disabled
Command Modes
• INTERFACE
• INTERFACE PORT-CHANNEL
Supported Modes Full–Switch
Command History
Version Description
9.9(0.0) Introduced on the FN IOM.
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Related Commands arp inspection — enables dynamic ARP inspection on a VLAN.
clear ip dhcp snooping
Clear the DHCP binding table.
Syntax
clear ip dhcp snooping binding
Dynamic Host Conguration Protocol 447