Reference Guide

Dynamic Host Configuration Protocol | 319
Enable DCHP snooping
Add a static entry in the binding table
Clear the binding table
Display the contents of the binding table
View the DHCP Snooping statistics with the show ip dhcp snooping command.
FTOS#show ip dhcp snooping
IP DHCP Snooping : Enabled.
IP DHCP Snooping Mac Verification : Disabled.
IP DHCP Relay Information-option : Disabled.
q
FTOS Behavior: In 8.2.1 releases, ip dhcp snooping trust was required on the port-channel interface
as well as on channel members. In subsequent releases, it is no longer necessary nor permitted to
configure port-channel members as trusted; configuring the port-channel interface alone as trusted is
sufficient, and ports must have the default configuration to be a channel members. When upgrading
from 8.2.1 releases, the channel-member configurations are applied first, so when the port-channel is
configured, its membership configuration is rejected, since the member ports no longer have the
default configuration. In this case, you must manually remove ip dhcp snooping trust on the channel
members add the ports to the port-channel.
Note: DHCP server packets will be dropped on all untrusted interfaces of a system configured for DHCP
snooping. To prevent these packets from being dropped, configure ip dhcp snooping trust on the
server-connected port.
Step Task Command Syntax Command Mode
1 Enable DHCP Snooping globally. ip dhcp snooping CONFIGURATION
2 Specify ports connected to DHCP servers as trusted. ip dhcp snooping trust INTERFACE
3 Enable DHCP Snooping on a VLAN. ip dhcp snooping vlan CONFIGURATION
Task Command Syntax Command Mode
Add a static entry in the binding table. ip dhcp snooping binding mac EXEC Privilege
Task Command Syntax Command Mode
Delete all of the entries in the binding table clear ip dhcp snooping binding EXEC Privilege
Task Command Syntax Command Mode
Display the contents of the binding table. show ip dhcp snooping EXEC Privilege