Quick Reference Guide

332 DHCP Snooping Commands
User Guidelines
To enable DHCP snooping, do the following:
1
Enable DHCP Snooping globally.
2 Enable DHCP Snooping per VLAN.
3 Set DHCP Snooping trusted port on the port in the DHCP server
direction.
The bindings database populated by DHCP snooping is used by several other
services, including IP source guard and dynamic ARP inspection. DHCP
snooping must be enabled for these services to operate.
Example
The following configuration enables DHCP snooping on VLAN 1 for a switch
connected to a DHCP server over interface gi1/0/4:
console(config)#ip dhcp snooping
console(config-if-vlan1)#ip dhcp snooping
console(config-if-vlan1)#exit
console(config)#interface gi1/0/4
console(config-if-Gi1/0/4)#ip dhcp snooping trust
ip dhcp snooping binding
Use the ip dhcp snooping binding command to configure a static DHCP
Snooping binding. Use the “no” form of this command to remove a static
binding.
Syntax
ip dhcp snooping binding mac-address vlan vlan-id ip-address interface
{gigabitethernet unit/slot/port | tengigabitethernet unit/slot/port
|
fortygigabitethernet unit/slot/port | port-channel port-channel-id }
no ip dhcp snooping binding
mac-address
• mac-address — The client's MAC address.
• vlan-id — The number of the VLAN the client is authorized to use.
• ip-address — The IP address of the client.
• interface — The interface on which the client is authorized. The interface may
be a physical interface or a port channel.
2CSNXXX_SWUM200.book Page 332 Tuesday, December 10, 2013 1:22 PM