Command Line Reference Guide

Dynamic Host Configuration Protocol (DHCP) | 403
Commands to Configure Secure DHCP
DHCP as defined by RFC 2131 provides no authentication or security mechanisms. Secure DHCP is a
suite of features that protects networks that use dynamic address allocation from spoofing and attacks.
• arp inspection
• arp inspection-trust
• clear ip dhcp snooping
• ip dhcp snooping
• ip dhcp snooping database
• ip dhcp snooping binding
• ip dhcp snooping database renew
• ip dhcp snooping trust
• ip dhcp source-address-validation
• ip dhcp snooping vlan
• ip dhcp relay
• ip dhcp snooping verify mac-address
• show ip dhcp snooping
arp inspection
c e s
Enable Dynamic Arp Inspection (DAI) on a VLAN.
Syntax
arp inspection
Command Modes
INTERFACE VLAN
Default
Disabled
Command
History
Related
Commands
arp inspection-trust
c e s
Specify a port as trusted so that ARP frames are not validated against the binding table.
Syntax
arp inspection-trust
Command Modes
INTERFACE
INTERFACE PORT-CHANNEL
Default
Disabled
Version 8.3.5.0 Introduced on the S55.
Version 8.3.1.0 Introduced on E-Series.
Version 8.2.1.0 Introduced on C-Series and S-Series
arp inspection-trust
Specify a port as trusted so that ARP frames are not validated against
the binding table.